2 matches found
SUSE-SU-2022:3560-1 Security update for snakeyaml
This update for snakeyaml fixes the following issues: snakeyaml was upgraded to version 1.31: - CVE-2022-25857: Fixed DoS due missing to nested depth limitation for collections bsc1202932. - CVE-2022-38749: Fixed DoS due to stack overflow in parser bsc1202932. - CVE-2022-38751: Fixed DoS due to...
9CVSS7.8AI score0.22709EPSS
SaveExploits3References13
OPENSUSE-SU-2021:1876-1 Security update for snakeyaml
This update for snakeyaml fixes the following issues: - Upgrade to 1.28 - CVE-2017-18640: The Alias feature allows entity expansion during a load operation bsc1159488, bsc1186088...
7.5CVSS7.4AI score0.26723EPSS
SaveExploits1References4
20