MEDIUM5.5Go
GHSA-r88r-gmrh-7j83· CVE-2021-4235, GO-2021-0061YAML Go package vulnerable to denial of service
Modified: 9/10/2026
package
Go/github.com/go-yaml/yaml
pkg:go/github.com/go-yaml/yaml
MEDIUM6.5Go
GHSA-wxc4-f4m6-wwqv· CVE-2019-11254, GO-2020-0036Excessive Platform Resource Consumption within a Loop in Kubernetes
Modified: 9/10/2026
—Go
GO-2020-0036· CVE-2019-11254, GHSA-wxc4-f4m6-wwqvExcessive resource consumption in YAML parsing in gopkg.in/yaml.v2
Modified: 2/4/2026
—Go
GO-2021-0061· CVE-2021-4235, GHSA-r88r-gmrh-7j83Denial of service in gopkg.in/yaml.v2
Modified: 2/4/2026