Skip to content
OpenAdvisories

Package · Maven

com.esotericsoftware.yamlbeans:yamlbeans

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2023-24620

    Esoteric YamlBeans XML Entity Expansion vulnerability

    An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expansion attack against YamlBeans YamlReader. By exploiting the Anchor feature in YAML, it is possible to generate a small YAML document that, w…

    com.esotericsoftware.yamlbeans:yamlbeans Maven