Known vulnerabilities in yaml

Vendor: The YAML Project
Software: yaml
Software CPE: cpe:2.3:a:the_yaml_project:yaml:*:*:*:*:*:golang:*:*
Website: https://yaml.org/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting yaml yaml is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 2.2.4 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU71361 - Resource exhaustion
CVE-2021-4235		 CWE-400 Medium
No
No
 2.2.3 19.01.2023 SB2023011937
SB2023011939
SB2023020869
and 13 more
#VU64275 - Deserialization of Untrusted Data
CVE-2022-28948		 CWE-502 Medium
No
No
 3.0.1 14.06.2022 SB2022061420
SB2022061421
SB2022080821
and 15 more