SnakeYAML 代码问题漏洞

SnakeYAML is a Java-based YAML parser. SnakeYaml suffers from a code issue vulnerability that stems from not limiting the types that can be instantiated during deserialization. An attacker exploiting this vulnerability could remotely execute code...