VDB
Sign up
MEDIUM6.5

GHSA-w37g-rhq8-7m4j

Snakeyaml vulnerable to Stack overflow leading to denial of service

Quick fix

GHSA-w37g-rhq8-7m4j — org.yaml:snakeyaml: upgrade to the fixed version with the command below.

# pom.xml: bump <version>1.32</version> for org.yaml:snakeyaml

Details

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

Are you affected?

Enter the version of the package you're using.

Affected packages

Maven/org.yaml:snakeyaml
Introduced in: 0Fixed in: 1.32
Fix# pom.xml: bump <version>1.32</version> for org.yaml:snakeyaml

References