EPSS
Percentile
40.8%
github.com/go-yaml/yaml is vulnerable to denial of service.The vulnerability exists in multiple functions of decode.go due to unbounded alias chasing which allows an attacker to cause an application crash via malicious input.
decode.go
access.redhat.com/security/cve/cve-2021-4235
github.com/advisories/GHSA-r88r-gmrh-7j83
github.com/go-yaml/yaml/commit/bb4e33bf68bf89cad44d386192cbed201f35b241
github.com/go-yaml/yaml/pull/375
lists.debian.org/debian-lts-announce/2023/07/msg00001.html
pkg.go.dev/vuln/GO-2021-0061