Known vulnerabilities in Snakeyaml
Vendor:
Snakeyaml Project
Software:
Snakeyaml
Software CPE:
cpe:2.3::snakeyaml_project:snakeyaml:*:*:*:*:*:*:*:*
Website:
https://github.com/snakeyaml/
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | - | 15.12.2022 |
SB2022121539 SB2022121540 SB2022121928 and 124 more |
||
| #VU67668 - Stack-based buffer overflow CVE-2022-38750 |
CWE-121 | Medium | 1.31 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |
||
| #VU67666 - Stack-based buffer overflow CVE-2022-38749 |
CWE-121 | Medium | 1.31 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 51 more |
||
| #VU67665 - Resource exhaustion CVE-2022-25857 |
CWE-400 | Medium | 1.31 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 83 more |
||
| #VU67664 - Stack-based buffer overflow CVE-2022-38752 |
CWE-121 | Medium | 1.32 | 27.09.2022 |
SB2022092715 SB2022092728 SB2022100555 and 66 more |
||
| #VU67663 - Out-of-bounds write CVE-2022-38751 |
CWE-787 | Medium | 1.31 | 27.09.2022 |
SB2022092714 SB2022092728 SB2022100555 and 50 more |