CVE-2022-25857
EUVD-2022-647030.08.2022, 05:15
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| snakeyaml_project | snakeyaml | 𝑥 < 1.31 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| snakeyaml |
|
References