Lucene search
+L

1 matches found

PyPA
PyPA
added 2023/11/13 3:15 a.m.9 views

PYSEC-2023-236

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...

7.5CVSS6.9AI score0.0097EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder