Lucene search
+L

6 matches found

OSV
OSV
added 2026/05/27 9:33 p.m.13 views

GHSA-4QPC-3HR4-R2P4 Symfony's YAML Parser Vulnerable to Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")

Description Symfony\Component\Yaml\Parser resolves YAML aliases anchor during parsing. Aliases that reference collections arrays, stdClass, TaggedValue-wrapped collections can themselves point to other collections containing aliases, creating exponential expansion at resolution time. A small inpu...

6.9CVSS5.8AI score0.00804EPSS
SaveExploits0References6
Rows per page
Query Builder