NuGet/YamlDotNet CVE-2018-1000210: high 7.8, EPSS 1.47%
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
Action: Upgrade YamlDotNet to 5.0.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-rpch-cqj9-h65r
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000210
- https://github.com/aaubry/YamlDotNet#version-500
- https://github.com/aaubry/YamlDotNet/blob/f96b7cc40a0498f8bafdeb49df3aa23aa2c60993/YamlDotNet/Serialization/NodeTypeResolvers/TypeNameInTagNodeTypeResolver.cs#L35
- https://github.com/advisories/GHSA-rpch-cqj9-h65r
CVE-2018-1000210 · published · modified · JSON