Snakeyaml vulnerabilities

1 known vulnerability in Snakeyaml from Snakeyaml Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  org.yaml:snakeyaml: Improper Restriction of Recursive Entity References in DTDs

  CVE-2022-25857Aug 30, 2022Org.yaml:snakeyamlEPSS 2.93%

  The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.