{"action":"Upgrade gopkg.in/yaml.v2 to 2.2.4 or later.","affected":[{"fixed":"2.2.4","introduced":"0"}],"component":"gopkg.in/yaml.v2","cve_ids":["CVE-2022-3064"],"ecosystem":"Go","epss":0.01778,"exploited":false,"fixed_versions":["2.2.4"],"ghsa_id":"GHSA-6q6q-88xp-6f2r","id":"tcs_01M5KFXDKAXYSS0HVJSE33THZJ","modified_at":"2026-02-04T02:18:50.393856Z","published_at":"2022-08-29T22:15:46Z","references":["https://osv.dev/vulnerability/GO-2022-0956","https://github.com/go-yaml/yaml/commit/f221b8435cfb71e54062f6c6e99e9ade30b124d5","https://github.com/go-yaml/yaml/releases/tag/v2.2.4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0956","url":"https://osv.dev/vulnerability/GO-2022-0956"}],"summary":"Excessive resource consumption in gopkg.in/yaml.v2"}