Snakeyaml Project vulnerabilities
We track 1 vulnerability in Snakeyaml Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Snakeyaml Project vulnerabilities
- 7.5 High severity
org.yaml:snakeyaml: Improper Restriction of Recursive Entity References in DTDs
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.