Esotericsoftware vulnerabilities
We track 1 vulnerability in Esotericsoftware products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2023.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Esotericsoftware vulnerabilities
- 7.8 High severity
Yamlbeans: Deserialization of Untrusted Data
An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.