JVN#86156389: Remarshal unlimitedly expanding YAML alias nodes

Remarshal provided by Remarshal Project expands YAML alias nodes unlimitedly (CWE-674), hence Remarshal is vulnerable to Billion Laughs Attack.

Impact

Processing untrusted YAML files may cause a denial-of-service (DoS) condition.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.
The developer has released the version listed below that addresses the vulnerability.

• Remarshal v0.17.1

Products Affected

• Remarshal versions prior to v0.17.1