github.com/go-yaml/yaml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.5

CVE-2021-4235

Denial of service in gopkg.in/yaml.v2

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

gopkg.in/yaml.v2 github.com/go-yaml/yaml gopkg.in/yaml.v2 github.com/go-yaml/yaml Debian Ubuntu Go

Dec 27, 2022
Medium 6.5

CVE-2019-11254

Kubernetes API Server denial of service vulnerability from malicious YAML payloads

The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.

Kubernetes Kubernetes kubernetes gopkg.in/yaml.v2 Debian Go

Apr 1, 2020