Description
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SnakeYAML | SnakeYAML | ≤ 2.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | snakeyaml | No fix yet | — |
| Debian 13 | snakeyaml | No fix yet | — |
| Debian 12 | snakeyaml | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | snakeyaml | No fix yet | — |
| Ubuntu 22.04 LTS | snakeyaml | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | snakeyaml | No fix yet | — |
| Ubuntu Pro 18.04 LTS | snakeyaml | No fix yet | — |
| Ubuntu Pro 16.04 LTS | snakeyaml | No fix yet | — |
| Ubuntu Pro 14.04 LTS | snakeyaml | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | prometheus-jmx-exporter +3 | 0.12.0-9.el8_7 | RHSA-2022:9058 |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Satellite Capsule 6 | ansible-collection-redhat-satellite | 3.9.0-2.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | ansible-collection-redhat-satellite_operations | 1.3.0-2.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | ansible-lint | 5.0.8-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | ansible-runner +1 | 2.2.1-3.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | ansiblerole-foreman_scap_client | 0.2.0-2.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | ansiblerole-insights-client | 1.7.1-2.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | cjson | 1.7.14-5.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | createrepo_c +3 | 0.20.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | dynflow-utils | 1.6.3-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman +1 | 3.5.1.14-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman-bootloaders-redhat +1 | 202102220000-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image | 1:4.1.0-10.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman-discovery-image-service +1 | 1.0.0-4.1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman-installer +1 | 1:3.5.2.1-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | foreman-proxy +1 | 3.5.1-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | katello +3 | 4.7.0-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | katello-certs-tools | 2.9.0-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | katello-client-bootstrap | 1.7.9-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | libcomps +2 | 0.1.18-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | libdb-cxx | 5.3.28-42.el8_4 | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | libsodium | 1.0.17-3.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | libsolv +2 | 0.7.22-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | libwebsockets | 2.4.2-2.el8 | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | mosquitto | 2.0.14-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | pulpcore-selinux | 1.3.2-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | puppet-agent | 7.12.1-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | puppet-agent-oauth | 0.5.10-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | puppet-foreman_scap_client | 0.4.0-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | puppetlabs-stdlib | 5.2.0-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | puppetserver | 7.9.3-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aiodns +1 | 3.0.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aiofiles +1 | 22.1.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aiohttp +1 | 3.8.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aiohttp-xmlrpc +1 | 1.5.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aioredis +1 | 2.0.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-aiosignal +1 | 1.2.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-ansible-builder +1 | 1.0.1-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-asgiref +1 | 3.5.2-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-async-lru +1 | 1.0.3-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-async-timeout +1 | 4.0.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-asyncio-throttle +1 | 1.0.2-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-attrs +1 | 21.4.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-backoff +1 | 2.1.2-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-bindep +1 | 2.11.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-bleach +1 | 3.3.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-bleach-allowlist +1 | 1.0.3-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-bracex +1 | 2.2.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-brotli +1 | 1.0.9-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-cchardet +1 | 2.1.7-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-certifi +1 | 2020.6.20-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-cffi +1 | 1.15.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-chardet +1 | 5.0.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-charset-normalizer +1 | 2.1.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-click +1 | 8.1.3-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-click-shell +1 | 2.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-colorama +1 | 0.4.4-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-commonmark +1 | 0.9.1-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-contextlib2 +1 | 21.6.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-cryptography +1 | 3.4.8-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-daemon +1 | 2.3.1-1.1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-dataclasses +1 | 0.8-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-dateutil +1 | 2.8.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-debian +1 | 0.1.43-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-defusedxml +1 | 0.7.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-deprecated +1 | 1.2.13-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-diff-match-patch +1 | 20200713-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-distro +1 | 1.7.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django +1 | 3.2.18-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django-currentuser +1 | 0.5.3-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django-filter +1 | 22.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django-guid +1 | 3.3.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django-import-export +1 | 2.8.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-django-lifecycle +1 | 1.0.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-djangorestframework +1 | 3.13.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-djangorestframework-queryfields +1 | 1.0.0-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-docutils +1 | 0.19-1.1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-drf-access-policy +1 | 1.1.2-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-drf-nested-routers +1 | 0.93.4-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-drf-spectacular +1 | 0.23.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-dynaconf +1 | 3.1.9-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-ecdsa +1 | 0.14.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-enrich +1 | 1.2.6-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-et-xmlfile +1 | 1.1.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-flake8 +1 | 3.9.2-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-frozenlist +1 | 1.3.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-future +1 | 0.18.2-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-galaxy-importer +1 | 0.4.5-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-gitdb +1 | 4.0.9-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-gitpython +1 | 3.1.26-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-gnupg +1 | 0.5.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-gunicorn +1 | 20.1.0-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-idna +1 | 3.3-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-idna-ssl +1 | 1.1.0-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-importlib-metadata +1 | 4.10.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-inflection +3 | 0.5.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-iniparse +1 | 0.4-35.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-jinja2 +1 | 3.1.2-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-jsonschema +1 | 4.9.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-lockfile +1 | 0.12.2-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-lxml +1 | 4.7.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-markdown +1 | 3.3.6-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-markuppy +1 | 1.14-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-markupsafe +1 | 2.0.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-mccabe +1 | 0.6.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-multidict +1 | 6.0.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-naya +3 | 1.1.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-odfpy +1 | 1.4.1-6.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-openpyxl +1 | 3.0.9-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-packaging +1 | 21.3-1.1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-parsley +1 | 1.3-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pbr +1 | 5.8.0-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pexpect +1 | 4.8.0-2.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-productmd +1 | 1.33-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-protobuf +1 | 4.21.6-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-psycopg2 +1 | 2.9.3-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-ptyprocess +1 | 0.7.0-1.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-ansible +1 | 1:0.15.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-certguard +1 | 1.5.5-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-cli +1 | 0.14.0-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-container +1 | 2.14.3-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-deb +1 | 2.20.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-file +1 | 1.11.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulp-rpm +1 | 3.18.11-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pulpcore +1 | 3.21.6-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyOpenSSL +1 | 19.1.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pycairo +1 | 1.20.1-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pycares +1 | 4.1.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pycodestyle +1 | 2.7.0-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pycparser +1 | 2.21-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pycryptodomex +1 | 3.14.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyflakes +1 | 2.3.1-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pygments +1 | 2.11.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pygobject +1 | 1:3.40.1-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pygtrie +1 | 2.5.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyjwkest +1 | 1.4.2-6.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyjwt +1 | 2.5.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyparsing +1 | 2.4.7-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyrsistent +1 | 0.18.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pytz +1 | 2022.2.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-pyyaml +1 | 5.4.1-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-qpid +1 | 1.37.0-1.el8 | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-redis +1 | 4.3.4-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-requests +1 | 2.28.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-requirements-parser +1 | 0.2.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-rhsm +1 | 1.19.2-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-rich +1 | 10.12.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-ruamel-yaml +1 | 0.17.20-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-ruamel-yaml-clib +1 | 0.2.6-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-schema +1 | 0.7.5-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-semantic-version +1 | 2.10.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-six +1 | 1.16.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-smmap +1 | 5.0.0-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-sqlparse +1 | 0.4.2-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-tablib +1 | 3.2.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-tenacity +1 | 7.0.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-toml +1 | 0.10.2-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-types-cryptography +1 | 3.3.23-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-typing-extensions +1 | 3.10.0.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-uritemplate +1 | 4.1.1-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-url-normalize +1 | 1.4.3-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-urllib3 +1 | 1.26.8-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-urlman +1 | 2.0.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-wcmatch +1 | 8.3-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-whitenoise +1 | 6.0.0-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-wrapt +1 | 1.14.1-1.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-xlrd +1 | 2.0.1-5.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-xlwt +1 | 1.3.0-3.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-yarl | 1.7.2-2.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python-zipp | 3.4.0-4.el8pc | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python2-qpid-qmf | 1.39.0-7.el8amq | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python2-saslwrapper | 0.22-6.el8sat | RHSA-2023:2097 |
| Red Hat Satellite Capsule 6 | python3-qpid-proton | 0.33.0-4.el8 | RHSA-2023:2097 |
| Red Hat Single Sign On 7 | rh-sso7-keycloak +1 | 18.0.6-1.redhat_00001.1.el7sso | RHSA-2023:1045, RHSA-2023:1044, RHSA-2023:1043 |
| Red Hat OpenShift 4 | jenkins | 2.361.1.1675406172-1.el8 | RHSA-2023:0777, RHSA-2023:0697 |
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.9.1675668922-1.el8 | RHSA-2023:0777, RHSA-2023:0697 |
| Red Hat Ocp Tools 4 | jenkins | 2.387.1.1683009763-3.el8 | RHSA-2024:0775, RHSA-2023:6171, RHSA-2023:3198 |
| Red Hat Ocp Tools 4 | jenkins-2-plugins | 4.11.1683009941-1.el8 | RHSA-2024:0775, RHSA-2023:6171, RHSA-2023:3198 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-apache-cxf +3 | 3.1.16-4.redhat_00003.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-hal-console | 3.2.17-1.Final_redhat_00001.1.el7eap | RHSA-2025:1747 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-core +7 | 2.10.4-2.redhat_00004.1.el7eap | RHSA-2025:1747 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-databind | 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jackson-modules-base +1 | 2.10.4-4.redhat_00004.1.el7eap | RHSA-2025:1747 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-jettison | 1.3.8-2.redhat_00002.1.ep7.el7 | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-netty +1 | 4.1.63-1.Final_redhat_00002.1.ep7.el7 | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-resteasy +16 | 3.0.27-1.Final_redhat_00001.1.ep7.el7 | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-resteasy-rxjava2 +2 | 3.11.6-1.Final_redhat_00001.1.el7eap | RHSA-2025:1747 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-snakeyaml | 1.33.0-1.SP1_redhat_00001.1.el7eap | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-velocity | 1.7.0-3.redhat_00006.1.ep7.el7 | RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly +1 | 7.1.9-2.GA_redhat_00002.1.ep7.el7 | RHSA-2025:1747, RHSA-2025:1746 |
| Red Hat Jboss Enterprise Application Platform Eus 7 | eap7-wildfly-javadocs +2 | 7.3.12-3.GA_redhat_00002.1.el7eap | RHSA-2025:1747 |
| Red Hat JBoss EAP 7 | eap7-activemq-artemis-native | 1:1.0.2-3.redhat_00004.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-apache-mime4j | 0.8.9-1.redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-artemis-native +1 | 1:1.0.2-4.redhat_00004.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-artemis-wildfly-integration | 1.0.7-1.redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-infinispan +9 | 11.0.17-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-ironjacamar +8 | 1.5.11-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jboss-ejb-client | 4.0.50-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jboss-el-api_3.0_spec | 2.0.1-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jboss-metadata +5 | 13.4.0-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jboss-server-migration +2 | 1.10.0-26.Final_redhat_00025.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jbossws-cxf | 5.4.8-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-jbossws-spi | 3.4.0-2.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-netty +28 | 4.1.86-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-picketlink-api +7 | 2.5.5-22.SP12_redhat_00012.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-resteasy +18 | 3.15.5-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-snakeyaml | 1.33.0-2.SP1_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-undertow | 2.2.23-1.SP2_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-undertow-jastow | 2.0.14-1.Final_redhat_00001.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-wildfly +4 | 7.4.10-6.GA_redhat_00002.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-wildfly-http-client +4 | 1.1.16-1.Final_redhat_00002.1.el7eap | RHSA-2023:1514, RHSA-2023:1513, RHSA-2023:1512 |
| Red Hat JBoss EAP 7 | eap7-wildfly-java-jdk17 | 7.4.10-6.GA_redhat_00002.1.el8eap | RHSA-2023:1514, RHSA-2023:1513 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | prometheus-jmx-exporter +3 | 0.12.0-9.el8_7 | ALSA-2022:9058 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | prometheus-jmx-exporter | 0.12.0-9.el8_7 | RLSA-2022:9058 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | cassandra-reaper | 4.0.1-r1 | — |
| Wolfi rolling | gradle-stage0 | No fix yet | — |
| Wolfi rolling | management-api-for-apache-cassandra-5.0 +1 | 0.1.89-r0 | — |
| Wolfi rolling | metric-collector-for-apache-cassandra-4.1 | 0.3.6-r3 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
PyTorch Model Server Registration and Deserialization RCE
exploit/multi/http/torchserver_cve_2023_43654
GitHub 7 repositories
-
1fabunicorn/SnakeYAML-CVE-2022-1471-POC ★ 8 · Mar 2, 2023
Code for veracode blog
-
falconkei/snakeyaml_cve_poc ★ 4 · May 8, 2023
SnakeYAML-CVE-2022-1471-POC
-
aykhan019/cve-2022-1471-jira-lab ★ 0 · Aug 15, 2026
-
seal-sec-demo-2/yaml-payload-2 ★ 0 · Jul 17, 2026
SnakeYAML CVE-2022-1471 exploit payload for Seal Security demos
-
anupamojha-eng/sentinel-transitive-cve-demo ★ 0 · Jun 1, 2026
Sentinel demo: transitive snakeyaml CVE-2022-1471 via Spring Boot + exploitable code pattern
-
jelee2555/CVE-2022-1471-attacker ★ 0 · Feb 26, 2026
attacker
-
seal-sec-demo-2/yaml-payload ★ 0 · Feb 5, 2026
SnakeYAML CVE-2022-1471 exploit payload for demo
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.yaml:snakeyaml | < 2.0 | 2.0 | GHSA-mjmj-j48q-9wg2 |
Advisories 49
- WID-SEC-2026-2923 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye, und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 8, 2026
- ALSA-2022:9058 Important: prometheus-jmx-exporter security update AlmaLinux Security Advisories · Oct 29, 2026
- NCSC-2026-0448 Kwetsbaarheden verholpen in Oracle Fusion Middleware NCSC-NL (Netherlands) · Oct 22, 2026
- WID-SEC-2026-4078 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2026
- RHSA-2023:6171 Red Hat Security Advisory: Red Hat Product OCP Tools 4.11 Openshift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2025:1747 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:1746 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2023:2097 Red Hat Security Advisory: Satellite 6.13 Release Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1514 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 9 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1512 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 7 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1513 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.10 on RHEL 8 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1045 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1044 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:0777 Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:1043 Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7 Red Hat Security Advisories (RHSA) · Oct 13, 2026
- RHSA-2023:3198 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 8, 2026
- RHSA-2024:0775 Red Hat Security Advisory: jenkins and jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- RHSA-2023:0697 Red Hat Security Advisory: OpenShift Container Platform 4.10.52 security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- RHSA-2022:9058 Red Hat Security Advisory: prometheus-jmx-exporter security update Red Hat Security Advisories (RHSA) · Sep 24, 2026
- WID-SEC-2026-1955 Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 23, 2026
- WID-SEC-2023-1793 Oracle PeopleSoft: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 16, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- WID-SEC-2026-1229 Atlassian Bamboo, Bitbucket, Confluence, Jira: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 2, 2026
- WID-SEC-2026-1608 Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 19, 2026
- WID-SEC-2024-0054 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2026
- WID-SEC-2023-1143 Red Hat Satellite: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 16, 2026
- RLSA-2022:9058 Important: prometheus-jmx-exporter security update Rocky Linux Security Advisories · Feb 5, 2026
- WID-SEC-2023-3132 IBM DB2: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 25, 2026
- WID-SEC-2024-0899 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2025
- WID-SEC-2022-2347 Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Feb 23, 2025
- NCSC-2024-0417 Kwetsbaarheden verholpen in Oracle Fusion Middleware NCSC-NL (Netherlands) · Oct 17, 2024
- NCSC-2024-0411 Kwetsbaarheden verholpen in Oracle Database producten NCSC-NL (Netherlands) · Oct 17, 2024
- WID-SEC-2024-0543 IBM WebSphere Service Registry and Repository: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 6, 2024
- WID-SEC-2024-0107 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 16, 2024
- WID-SEC-2023-3063 Atlassian Produkte: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Dec 17, 2023
- WID-SEC-2023-2688 Oracle Retail Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023
- WID-SEC-2023-2675 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 17, 2023
- WID-SEC-2023-2231 IGEL ICG: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Aug 30, 2023
- WID-SEC-2023-1812 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 20, 2023
- WID-SEC-2023-1795 Oracle JD Edwards: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1784 Oracle Siebel CRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1782 Oracle Utilities Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1813 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1808 Oracle Financial Services Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2023
- WID-SEC-2023-1755 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 16, 2023
- WID-SEC-2023-0871 IBM Spectrum Scale: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jun 29, 2023
- WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023
- WID-SEC-2023-1135 IBM Business Automation Workflow: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · May 2, 2023
- WID-SEC-2023-1022 Oracle Communications Applications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 18, 2023
References
- https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
- https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
- https://github.com/mbechler/marshalsec
- https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
- https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
- https://security.netapp.com/advisory/ntap-20230818-0015/
- http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
- http://www.openwall.com/lists/oss-security/2023/11/19/1
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
- https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html