{"action":"Upgrade YamlDotNet to 5.0.0 or later.","affected":[{"fixed":"5.0.0","introduced":"0"}],"component":"YamlDotNet","cve_ids":["CVE-2018-1000210"],"ecosystem":"NuGet","epss":0.01469,"exploited":false,"fixed_versions":["5.0.0"],"ghsa_id":"GHSA-rpch-cqj9-h65r","id":"tcs_01M5N90A4TJDNG9T268KAM2AG6","modified_at":"2023-11-08T03:59:37.602008Z","published_at":"2018-10-16T17:01:10Z","references":["https://osv.dev/vulnerability/GHSA-rpch-cqj9-h65r","https://nvd.nist.gov/vuln/detail/CVE-2018-1000210","https://github.com/aaubry/YamlDotNet#version-500","https://github.com/aaubry/YamlDotNet/blob/f96b7cc40a0498f8bafdeb49df3aa23aa2c60993/YamlDotNet/Serialization/NodeTypeResolvers/TypeNameInTagNodeTypeResolver.cs#L35","https://github.com/advisories/GHSA-rpch-cqj9-h65r"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-rpch-cqj9-h65r","url":"https://osv.dev/vulnerability/GHSA-rpch-cqj9-h65r"}],"summary":"High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed"}