Lucene search
+L

3 matches found

OSV
OSV
added 2026/03/24 12:6 a.m.14 views

CVE-2026-33320 Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service

Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the...

6.2CVSS6.4AI score
SaveExploits0References3
OSV
OSV
added 2026/03/23 6:14 p.m.7 views

GO-2026-4768 Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service in github.com/tomwright/dasel

Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service in github.com/tomwright/dasel...

6.2CVSS5.8AI score0.00211EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/13 12:0 a.m.4 views

PT-2023-30338 · Remarshal · Remarshal

Name of the Vulnerable Software and Affected Versions: Remarshal versions prior to 0.17.1 Description: The issue allows for the expansion of YAML alias nodes unlimitedly, making Remarshal susceptible to a Billion Laughs Attack. This can lead to a denial-of-service DoS condition when processing...

8.7CVSS7.3AI score0.0097EPSS
SaveExploits0References9
Rows per page
Query Builder