Lucene search
+L

1 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/11/10 5:41 a.m.5 views

Remarshal unlimitedly expanding YAML alias nodes

Overview Remarshal provided by Remarshal Project expands YAML alias nodes unlimitedly CWE-674, hence Remarshal is vulnerable to Billion Laughs Attack. Taichi Kotake of Sterra Security Co.,Ltd. / Akatsuki Games Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

7.5CVSS6.6AI score0.00962EPSS
SaveExploits0References7
Rows per page
Query Builder