HIGH7.5Go
GHSA-6q6q-88xp-6f2r· CVE-2022-3064, GO-2022-0956yaml package for Go can consume excessive amounts of CPU or memory
Modified: 9/10/2026
package
Go/gopkg.in/yaml.v2
pkg:go/gopkg.in/yaml.v2
MEDIUM5.5Go
GHSA-r88r-gmrh-7j83· CVE-2021-4235, GO-2021-0061YAML Go package vulnerable to denial of service
Modified: 9/10/2026
MEDIUM6.5Go
GHSA-wxc4-f4m6-wwqv· CVE-2019-11254, GO-2020-0036Excessive Platform Resource Consumption within a Loop in Kubernetes
Modified: 9/10/2026
—Go
GO-2020-0036· CVE-2019-11254, GHSA-wxc4-f4m6-wwqvExcessive resource consumption in YAML parsing in gopkg.in/yaml.v2
Modified: 2/4/2026
—Go
GO-2021-0061· CVE-2021-4235, GHSA-r88r-gmrh-7j83Denial of service in gopkg.in/yaml.v2
Modified: 2/4/2026
—Go
GO-2022-0956· CVE-2022-3064, GHSA-6q6q-88xp-6f2rExcessive resource consumption in gopkg.in/yaml.v2
Modified: 2/4/2026