4 matches found
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input...
[SECURITY] Fedora 36 Update: golang-github-goccy-yaml-1.9.5-3.fc36
Go package similar to github.com/go-yaml/yaml with some additional features...
[SECURITY] Fedora 35 Update: golang-github-goccy-yaml-1.9.5-3.fc35
Go package similar to github.com/go-yaml/yaml with some additional features...
Denial Of Service (DoS)
github.com/go-yaml/yaml is vulnerable to denial of service. An authorized user is able to crash the application by sending malicious YAML payloads to cause kube-apiserver to consume excessive CPU cycles...