CVE-2022-28948

CVE-2022-28948 affects Go-Yaml v3 Unmarshal; a crash can occur when deserializing invalid input. Connected sources corroborate a Go-Yaml Unmarshal issue across advisories (e.g., Astra Linux, Debian, GHSA), with no explicit patch version in the provided documents. Exploitation status is not stated...

CVE-2022-28948

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...

CVE-2022-28948

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...

PT-2022-19325 · Go-Yaml +2 · Go-Yaml +2

Name of the Vulnerable Software and Affected Versions: Go-Yaml version v3 Description: An issue in the Unmarshal function causes the program to crash or panic when attempting to deserialize invalid input. Recommendations: For Go-Yaml version v3, consider validating input data before attempting to...

Go-Yaml 代码问题漏洞

Go-Yaml is a Yaml support for the Go language. Enables Go programs to easily encode and decode Yaml values. A security vulnerability exists in Go-Yaml v3. An attacker exploited this vulnerability to cause a program to crash when attempting to deserialize invalid input via the Unmarshal function...

Unhandled exception in gopkg.in/yaml.v3

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input...

Denial Of Service (DoS)

github.com/go-yaml/yaml is vulnerable to denial of service. An authorized user is able to crash the application by sending malicious YAML payloads to cause kube-apiserver to consume excessive CPU cycles...

XML Entity Expansion

go-yaml is vulnerable to a Billion Laughs Attack...