1 result · Feed
-
High 7.5
Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion
The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader …