Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/19 12:50 p.m.8 views

Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service

Summary dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library's own UnmarshalYAML implementation, which manually resolves alias nodes by recursively following yaml.Node.Alias pointers without any...

6.2CVSS5.9AI score0.00211EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder