1 matches found
Remarshal unlimitedly expanding YAML alias nodes
Overview Remarshal provided by Remarshal Project expands YAML alias nodes unlimitedly CWE-674, hence Remarshal is vulnerable to Billion Laughs Attack. Taichi Kotake of Sterra Security Co.,Ltd. / Akatsuki Games Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
7.5CVSS6.6AI score0.0097EPSS
SaveExploits0References7
20