Org.yaml:snakeyaml vulnerabilities
We track 1 vulnerability in Org.yaml:snakeyaml products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Org.yaml:snakeyaml vulnerabilities
- 7.5 High severity
org.yaml:snakeyaml: Improper Restriction of Recursive Entity References in DTDs
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.