PT-2026-114952

Name of the Vulnerable Software and Affected Versions symfony/yaml versions 5.4.0 through 5.4.53 symfony/yaml versions 6.0.0-BETA1 through 6.4.44 symfony/yaml versions 7.0.0-BETA1 through 7.4.17 symfony/yaml versions 8.0.0-BETA1 through 8.1.5 Description The YamlParser::lexInlineStructure functio...

OSV-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024 Crash type: Security exception Crash state: com.fasterxml.jackson.core.JsonParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName...

jackson-dataformats-text:DeserializerFuzzer: Security exception in com.fasterxml.jackson.core.JsonParser.currentName

Project: https://github.com/FasterXML/jackson-dataformats-text.git Detailed Report: https://oss-fuzz.com/testcase?key=6484980599226368 Project: jackson-dataformats-text Fuzzing Engine: libFuzzer Fuzz Target: DeserializerFuzzer Job Type: libfuzzerasanjackson-dataformats-text Platform Id: linux Cra...

snakeyaml: Multiple Vulnerabilities

Background snakeyaml is a YAML 1.1 parser and emitter for Java. Description Multiple vulnerabilities have been discovered in snakeyaml. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known...

CVE-2017-16616

An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safeload should have been used. An attacker can...

PT-2017-14497

Name of the Vulnerable Software and Affected Versions PyAnyAPI versions prior to 0.6.1 Description An issue exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py. The load function is used where safe load should have been used, allowing a YAML parser to execute...

CVE-2017-16616: Undefined Security Weakness

An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safeload should have been used. An attacker can...

PT-2014-2471

Name of the Vulnerable Software and Affected Versions Symfony versions 2.0.x through 2.0.21 Symfony versions 2.1.x through 2.1.6 Description The issue allows remote attackers to execute arbitrary PHP code via a serialized PHP object to the 1 Yaml::parse or 2 YamlParser::parse function...