70 matches found
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
CVE-2022-28948 affects Go-Yaml v3 Unmarshal; a crash can occur when deserializing invalid input. Connected sources corroborate a Go-Yaml Unmarshal issue across advisories (e.g., Astra Linux, Debian, GHSA), with no explicit patch version in the provided documents. Exploitation status is not stated...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
Unhandled exception in gopkg.in/yaml.v3
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...
PT-2022-19325
Name of the Vulnerable Software and Affected Versions Go-Yaml version v3 Description An issue in the Unmarshal function causes the program to crash or panic when attempting to deserialize invalid input. Recommendations For Go-Yaml version v3, consider validating input data before attempting to...
Go-Yaml 代码问题漏洞
Go-Yaml is a Yaml support for the Go language. Enables Go programs to easily encode and decode Yaml values. A security vulnerability exists in Go-Yaml v3. An attacker exploited this vulnerability to cause a program to crash when attempting to deserialize invalid input via the Unmarshal function...
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to denial of service. An authorized user is able to crash the application by sending malicious YAML payloads to cause kube-apiserver to consume excessive CPU cycles...