Denial Of Service (DoS)

yamlbeans is vulnerable to Denial Of Service (DoS). The vulnerability exists due to a lack of entity expansion limits when parsing a YAML document. An attacker can exploit this flaw by creating a document small in size, but when expanded via the anchor feature expands to a large size, causing excessive CPU and memory consumption, allowing an attacker to crash the application by providing a maliciously crafted YAML document.