Skip to content
OpenAdvisories

Vendor

charleskorn

2 known vulnerabilities.

Products

kaml 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-28118

    kaml has potential denial of service while parsing input with anchors and aliases

    kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAM…

    charleskorn kaml com.charleskorn.kaml:kaml Maven