Skip to content
OpenAdvisories

Package · Maven

com.charleskorn.kaml:kaml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-28118

    kaml has potential denial of service while parsing input with anchors and aliases

    kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAM…

    charleskorn kaml com.charleskorn.kaml:kaml Maven
  • Medium 4.3
    CVE-2021-39194

    Denial of service while parsing polymorphic input with tagged polymorphism style in kaml

    kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsin…

    charleskorn kaml com.charleskorn.kaml:kaml Maven