Snakeyaml
6 CVEs across 1 Snakeyaml products. Browse Snakeyaml vulnerabilities, severities, and proof-of-concept exploits.
Snakeyaml products with known CVEs
Snakeyaml CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-1471 | High | 8.3 | 2022-12-01 | SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker ca… |
CVE-2022-41854 | Medium | 5.8 | 2022-11-11 | Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an a… |
CVE-2022-38752 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38751 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38750 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |
CVE-2022-38749 | Medium | 6.5 | 2022-09-05 | Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacke… |