Remarshal-project vulnerabilities
We track 1 vulnerability in Remarshal-project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Remarshal-project vulnerabilities
- 7.5 High severity
Remarshal: Uncontrolled Recursion
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.