GHSA-rvwf-54qp-4r6vHighCVSS 7.5

SnakeYAML Entity Expansion during load operation

Published
June 4, 2021
Last Modified
May 22, 2023

🔗 CVE IDs covered (1)

CVE-2017-18640 →

📋 Description

The Alias feature in SnakeYAML 1.18 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

🎯 Affected products1

  • maven/org.yaml:snakeyaml:< 1.26

🔗 References (63)