kaml vulnerabilities

1 known vulnerability in kaml from Charleskorn. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  kaml: Improper Restriction of Recursive Entity References in DTDs

  CVE-2023-28118Mar 20, 2023Charleskorn

  kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML