Lucene search
+L

2 matches found

OSV
OSV
added 2021/06/04 9:37 p.m.10 views

GHSA-RVWF-54QP-4R6V SnakeYAML Entity Expansion during load operation

The Alias feature in SnakeYAML 1.18 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

7.5CVSS6.8AI score0.26723EPSS
SaveExploits1References63
RedHat Linux
RedHat Linux
added 2020/06/17 4:34 p.m.30 views

snakeyaml: Billion laughs attack via alias feature

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564...

7.5CVSS6.8AI score0.26723EPSS
SaveExploits1References4
Rows per page
Query Builder