Lucene search

K
osvGoogleOSV:GHSA-4QHR-Q7WF-94XP
HistoryMay 24, 2022 - 5:09 p.m.

Deserialization of Untrusted Data in JYaml

2022-05-2417:09:22
Google
osv.dev
12
jyaml
remote code execution
deserialization
discontinued product
software

EPSS

0.028

Percentile

90.7%

JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.

EPSS

0.028

Percentile

90.7%

Related for OSV:GHSA-4QHR-Q7WF-94XP