SnakeYaml: Constructor Deserialization Remote Code Execution

A flaw was found in the SnakeYaml package. This flaw allows an attacker to benefit from remote code execution by sending malicious YAML content and this content being deserialized by the constructor. Deserialization is unsafe and leads to Remote Code Execution RCE...

snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash, resulting in a denial of service...

snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

dev-java/snakeyaml: DoS via stack overflow

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack...

SUSE CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

Denial Of Service (DoS)

yaml is vulnerable to Denial of Service DoS attacks. According to the documentation, the parseDocument and parseAllDocuments functions should never raise an exception. However, an exception that comes from the prettifyError function is thrown when these functions are given erroneous input that...

@0l00000l/auth (>=1.0.0, <=1.0.8), @1sat/cli (>=0.0.53, <=0.0.99) +1018 more potentially affected by CVE-2023-2251 via yaml (>=2.0.0, <=2.2.1)

yaml NPM version =2.0.0, =1.0.0, =0.0.53, =0.0.31, =0.0.9, =2.0.0, =1.2.2-20211215122352, =3.0.0, =2.1.42, =1.1.5, =14.6.15, =1.11.39, =9.0.0, =2.0.0, =2.0.0, =0.0.1-AHG-001, =0.0.1-AHG-002 and more Source cves: CVE-2023-2251 Source advisory: OSV:GHSA-F9XV-Q969-PQX4...

GHSA-F9XV-Q969-PQX4 Uncaught Exception in yaml

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2...

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

DEBIAN-CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

UBUNTU-CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

CVE-2023-2251

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

CVE-2023-2251

Technical details for CVE-2023-2251 are not publicly available in the provided documents. Monitor for updates.

eemeli yaml 安全漏洞

eemeli yaml is a C++ library for parsing and generating YAML documents that supports the latest YAML specification and provides a simple API to read and write YAML documents. A security vulnerability exists in eemeli yaml prior to version 2.2.2, which stems from an uncaught exception in the...

CVE-2023-2251 Uncaught Exception in eemeli/yaml

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

CVE-2023-2251 Uncaught Exception in eemeli/yaml

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...

This Week in Spring - April 18th, 2023

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week, I just returned from Western Europe for Devoxx FR Paris and Kotlin Conf Amsterdam. I went home, saw my family, did some laundry, and then turned right back around to head to Chicago, Illinois, for a special joint...