CVE-2021-39194

CVE-2021-39194 affects kaml, an open-source YAML implementation with kotlinx.serialization support. The issue occurs when processing YAML input for polymorphic types using the default tagged polymorphism style: YAML input that provides a tag but no value can cause the parser to loop indefinitely,...

charleskorn kaml 安全漏洞

charleskorn kaml is an open source implementation of the YAML format that supports kotlinx.serialization. A security vulnerability exists in versions of kaml prior to 0.35.3 that allows an attacker to provide arbitrary YAML input to an application using kaml An attacker could cause the applicatio...