3 matches found
Denial Of Service (DoS)
snakeyaml is vulnerable to denial of service. The vulnerability exists in the Composer function of Composer.java as it does not properly restrict the nested depth limitation for collections which allows an attacker to crash the application through the stack overflow by providing malicious yaml...
6.5CVSS7.2AI score0.0165EPSS
SaveExploits0References8Affected Software3
20