PatchTheCVEyaml project vulnerabilities
Recent CVEs affecting yaml project products. 3 tracked.
yaml project has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-04-24. Highest priority: CVE-2023-2251 (score 53/100).
- CVE-2023-2251 HIGH 7.5 UPGRADE Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.
- CVE-2022-3064 HIGH 7.5 UPGRADE Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
- CVE-2021-4235 MEDIUM 5.5 UPGRADE Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant sy
FAQ
How do I fix yaml project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yaml project being exploited right now?
None of the tracked yaml project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yaml project CVE should I patch first?
CVE-2023-2251 currently ranks highest (53/100): Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5..