[ Vendor · 1 CVEs ]

SnakeYAML

CVEs affecting SnakeYAML published in the last 30 days, plus any SnakeYAML CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2022-1471 1 Dec 2022 CVSS 8.3 SnakeYAMLSnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an…