Debian/snakeyaml: high 7.5
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
Action: Upgrade snakeyaml to 1.31-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.31-1 | - |
Fixed versions
| 1.31-1 |
Sources
- osv: DEBIAN-CVE-2022-25857#Debian:13/snakeyaml
- https://security-tracker.debian.org/tracker/CVE-2022-25857
published · modified · JSON