Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-e8hu-czv4-yyc5
Summary
SnakeYAML Entity Expansion during load operation
The Alias feature in SnakeYAML 1.18 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
Aliases
0
alias CVE-2017-18640
1
alias GHSA-rvwf-54qp-4r6v
Fixed_packages
0
url pkg:deb/debian/snakeyaml@1.25%2Bds-3?distro=trixie
purl pkg:deb/debian/snakeyaml@1.25%2Bds-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.25%252Bds-3%3Fdistro=trixie
1
url pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fb8u-g65k-hffs
1
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2%3Fdistro=trixie
2
url pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2
purl pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fb8u-g65k-hffs
1
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2
3
url pkg:deb/debian/snakeyaml@1.33-2?distro=trixie
purl pkg:deb/debian/snakeyaml@1.33-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-2%3Fdistro=trixie
4
url pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie
purl pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.0%252Bds%252Breally1.33-1%3Fdistro=trixie
5
url pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie
purl pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.5%252Bds-1%3Fdistro=trixie
6
url pkg:ebuild/dev-java/snakeyaml@1.33
purl pkg:ebuild/dev-java/snakeyaml@1.33
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-java/snakeyaml@1.33
7
url pkg:maven/org.yaml/snakeyaml@1.26
purl pkg:maven/org.yaml/snakeyaml@1.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.26
Affected_packages
0
url pkg:deb/debian/snakeyaml@1.12-2
purl pkg:deb/debian/snakeyaml@1.12-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-e8hu-czv4-yyc5
3
vulnerability VCID-mm3e-4pej-byed
4
vulnerability VCID-qxfs-sq38-jfad
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.12-2
1
url pkg:deb/debian/snakeyaml@1.17-1
purl pkg:deb/debian/snakeyaml@1.17-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-e8hu-czv4-yyc5
3
vulnerability VCID-mm3e-4pej-byed
4
vulnerability VCID-qxfs-sq38-jfad
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.17-1
2
url pkg:deb/debian/snakeyaml@1.23-1
purl pkg:deb/debian/snakeyaml@1.23-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-e8hu-czv4-yyc5
3
vulnerability VCID-mm3e-4pej-byed
4
vulnerability VCID-qxfs-sq38-jfad
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.23-1
3
url pkg:maven/org.yaml/snakeyaml@1.4
purl pkg:maven/org.yaml/snakeyaml@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.4
4
url pkg:maven/org.yaml/snakeyaml@1.5
purl pkg:maven/org.yaml/snakeyaml@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.5
5
url pkg:maven/org.yaml/snakeyaml@1.6
purl pkg:maven/org.yaml/snakeyaml@1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.6
6
url pkg:maven/org.yaml/snakeyaml@1.7
purl pkg:maven/org.yaml/snakeyaml@1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.7
7
url pkg:maven/org.yaml/snakeyaml@1.8
purl pkg:maven/org.yaml/snakeyaml@1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.8
8
url pkg:maven/org.yaml/snakeyaml@1.9
purl pkg:maven/org.yaml/snakeyaml@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.9
9
url pkg:maven/org.yaml/snakeyaml@1.10
purl pkg:maven/org.yaml/snakeyaml@1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.10
10
url pkg:maven/org.yaml/snakeyaml@1.11
purl pkg:maven/org.yaml/snakeyaml@1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.11
11
url pkg:maven/org.yaml/snakeyaml@1.12
purl pkg:maven/org.yaml/snakeyaml@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.12
12
url pkg:maven/org.yaml/snakeyaml@1.13
purl pkg:maven/org.yaml/snakeyaml@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.13
13
url pkg:maven/org.yaml/snakeyaml@1.14
purl pkg:maven/org.yaml/snakeyaml@1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.14
14
url pkg:maven/org.yaml/snakeyaml@1.15
purl pkg:maven/org.yaml/snakeyaml@1.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.15
15
url pkg:maven/org.yaml/snakeyaml@1.16
purl pkg:maven/org.yaml/snakeyaml@1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.16
16
url pkg:maven/org.yaml/snakeyaml@1.17
purl pkg:maven/org.yaml/snakeyaml@1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.17
17
url pkg:maven/org.yaml/snakeyaml@1.18
purl pkg:maven/org.yaml/snakeyaml@1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.18
18
url pkg:maven/org.yaml/snakeyaml@1.19
purl pkg:maven/org.yaml/snakeyaml@1.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.19
19
url pkg:maven/org.yaml/snakeyaml@1.20
purl pkg:maven/org.yaml/snakeyaml@1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.20
20
url pkg:maven/org.yaml/snakeyaml@1.21
purl pkg:maven/org.yaml/snakeyaml@1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.21
21
url pkg:maven/org.yaml/snakeyaml@1.22
purl pkg:maven/org.yaml/snakeyaml@1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.22
22
url pkg:maven/org.yaml/snakeyaml@1.23
purl pkg:maven/org.yaml/snakeyaml@1.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.23
23
url pkg:maven/org.yaml/snakeyaml@1.24
purl pkg:maven/org.yaml/snakeyaml@1.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.24
24
url pkg:maven/org.yaml/snakeyaml@1.25
purl pkg:maven/org.yaml/snakeyaml@1.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.25
25
url pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-6?arch=el8
purl pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-6?arch=el8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e8hu-czv4-yyc5
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/prometheus-jmx-exporter@0.12.0-6%3Farch=el8
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18640.json
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-18640.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-18640
reference_id
reference_type
scores
0
value 0.02166
scoring_system epss
scoring_elements 0.84328
published_at 2026-04-16T12:55:00Z
1
value 0.02166
scoring_system epss
scoring_elements 0.84306
published_at 2026-04-13T12:55:00Z
2
value 0.02166
scoring_system epss
scoring_elements 0.8431
published_at 2026-04-12T12:55:00Z
3
value 0.02166
scoring_system epss
scoring_elements 0.84316
published_at 2026-04-11T12:55:00Z
4
value 0.02166
scoring_system epss
scoring_elements 0.84299
published_at 2026-04-09T12:55:00Z
5
value 0.02166
scoring_system epss
scoring_elements 0.84238
published_at 2026-04-01T12:55:00Z
6
value 0.02166
scoring_system epss
scoring_elements 0.84271
published_at 2026-04-07T12:55:00Z
7
value 0.02166
scoring_system epss
scoring_elements 0.84269
published_at 2026-04-04T12:55:00Z
8
value 0.02166
scoring_system epss
scoring_elements 0.8425
published_at 2026-04-02T12:55:00Z
9
value 0.02166
scoring_system epss
scoring_elements 0.84293
published_at 2026-04-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-18640
2
reference_url https://bitbucket.org/asomov/snakeyaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/asomov/snakeyaml
3
reference_url https://bitbucket.org/asomov/snakeyaml/commits/da11ddbd91c1f8392ea932b37fa48110fa54ed8c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/asomov/snakeyaml/commits/da11ddbd91c1f8392ea932b37fa48110fa54ed8c
4
reference_url https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/asomov/snakeyaml/issues/377/allow-configuration-for-preventing-billion
5
reference_url https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/asomov/snakeyaml/wiki/Billion%20laughs%20attack
6
reference_url https://bitbucket.org/asomov/snakeyaml/wiki/Changes
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/asomov/snakeyaml/wiki/Changes
7
reference_url https://bitbucket.org/snakeyaml/snakeyaml/issues/377
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/issues/377
8
reference_url https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18640
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18640
10
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
11
reference_url https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457@%3Ccommits.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1058e7646988394de6a3fd0857ea9b1ee0de14d7bb28fee5ff782457@%3Ccommits.atlas.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r154090b871cf96d985b90864442d84eb027c72c94bc3f0a5727ba2d1@%3Ccommon-issues.hadoop.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r16ae4e529401b75a1f5aa462b272b31bf2a108236f882f06fddc14bc@%3Ccommon-issues.hadoop.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1703a402f30c8a2ee409f8c6f393e95a63f8c952cc9ee5bf9dd586dc@%3Ccommits.cassandra.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/r182e9cf6f3fb22b9be0cac4ff0685199741d2ab6e9a4e27a3693c224@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r182e9cf6f3fb22b9be0cac4ff0685199741d2ab6e9a4e27a3693c224@%3Ccommon-issues.hadoop.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/r191ceadb1b883357384981848dfa5235cb02a90070c553afbaf9b3d9@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r191ceadb1b883357384981848dfa5235cb02a90070c553afbaf9b3d9@%3Ccommits.cassandra.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/r1aab47b48a757c70e40fc0bcb1fcf1a3951afa6a17aee7cd66cf79f8@%3Ccommon-commits.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1aab47b48a757c70e40fc0bcb1fcf1a3951afa6a17aee7cd66cf79f8@%3Ccommon-commits.hadoop.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/r1dfac8b6a7097bcb4979402bbb6e2f8c36d0d9001e3018717eb22b7e@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1dfac8b6a7097bcb4979402bbb6e2f8c36d0d9001e3018717eb22b7e@%3Cdev.atlas.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/r1ffce2ed3017e9964f03ad2c539d69e49144fc8e9bf772d641612f98@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1ffce2ed3017e9964f03ad2c539d69e49144fc8e9bf772d641612f98@%3Ccommits.cassandra.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/r20350031c60a77b45e0eded33e9b3e9cb0cbfc5e24e1c63bf264df12@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r20350031c60a77b45e0eded33e9b3e9cb0cbfc5e24e1c63bf264df12@%3Ccommits.cassandra.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/r22ac2aa053b7d9c6b75a49db78125c9316499668d0f4a044f3402e2f@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r22ac2aa053b7d9c6b75a49db78125c9316499668d0f4a044f3402e2f@%3Ccommon-issues.hadoop.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe@%3Cusers.kafka.apache.org%3E
23
reference_url https://lists.apache.org/thread.html/r28c9009a48d52cf448f8b02cd823da0f8601d2dff4d66f387a35f1e0@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r28c9009a48d52cf448f8b02cd823da0f8601d2dff4d66f387a35f1e0@%3Cdev.atlas.apache.org%3E
24
reference_url https://lists.apache.org/thread.html/r2a5b84fdf59042dc398497e914b5bb1aed77328320b1438144ae1953@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2a5b84fdf59042dc398497e914b5bb1aed77328320b1438144ae1953@%3Cdev.atlas.apache.org%3E
25
reference_url https://lists.apache.org/thread.html/r2b05744c0c2867daa5d1a96832965b7d6220328b0ead06c22a6e7854@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2b05744c0c2867daa5d1a96832965b7d6220328b0ead06c22a6e7854@%3Ccommits.pulsar.apache.org%3E
26
reference_url https://lists.apache.org/thread.html/r2db207a2431a5e9e95e899858ab1f5eabd9bcc790a6ca7193ae07e94@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r2db207a2431a5e9e95e899858ab1f5eabd9bcc790a6ca7193ae07e94@%3Cdev.atlas.apache.org%3E
27
reference_url https://lists.apache.org/thread.html/r436988d2cfe8a770ae361c82b181c5b2bf48a249bad84d8a55a3b46e@%3Cdev.phoenix.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r436988d2cfe8a770ae361c82b181c5b2bf48a249bad84d8a55a3b46e@%3Cdev.phoenix.apache.org%3E
28
reference_url https://lists.apache.org/thread.html/r465d2553a31265b042cf5457ef649b71e0722ab89b6ea94a5d59529b@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r465d2553a31265b042cf5457ef649b71e0722ab89b6ea94a5d59529b@%3Ccommon-issues.hadoop.apache.org%3E
29
reference_url https://lists.apache.org/thread.html/r4c682fb8cf69dd14162439656a6ebdf42ea6ad0e4edba95907ea3f14@%3Ccommits.servicecomb.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r4c682fb8cf69dd14162439656a6ebdf42ea6ad0e4edba95907ea3f14@%3Ccommits.servicecomb.apache.org%3E
30
reference_url https://lists.apache.org/thread.html/r4d7f37da1bc2df90a5a0f56eb7629b5ea131bfe11eeeb4b4c193f64a@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r4d7f37da1bc2df90a5a0f56eb7629b5ea131bfe11eeeb4b4c193f64a@%3Ccommon-issues.hadoop.apache.org%3E
31
reference_url https://lists.apache.org/thread.html/r5510f0125ba409fc1cabd098ab8b457741e5fa314cbd0e61e4339422@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r5510f0125ba409fc1cabd098ab8b457741e5fa314cbd0e61e4339422@%3Cdev.atlas.apache.org%3E
32
reference_url https://lists.apache.org/thread.html/r55d807f31e64a080c54455897c20b1667ec792e5915132c7b7750533@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r55d807f31e64a080c54455897c20b1667ec792e5915132c7b7750533@%3Ccommits.cassandra.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/r56805265475919252ba7fc10123f15b91097f3009bae86476624ca25@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r56805265475919252ba7fc10123f15b91097f3009bae86476624ca25@%3Ccommits.cassandra.apache.org%3E
34
reference_url https://lists.apache.org/thread.html/r643ba53f002ae59068f9352fe1d82e1b6f375387ffb776f13efe8fda@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r643ba53f002ae59068f9352fe1d82e1b6f375387ffb776f13efe8fda@%3Ccommon-issues.hadoop.apache.org%3E
35
reference_url https://lists.apache.org/thread.html/r666f29a7d0e1f98fa1425ca01efcfa86e6e3856e01d300828aa7c6ea@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r666f29a7d0e1f98fa1425ca01efcfa86e6e3856e01d300828aa7c6ea@%3Ccommits.pulsar.apache.org%3E
36
reference_url https://lists.apache.org/thread.html/r6c91e52b3cc9f4e64afe0f34f20507143fd1f756d12681a56a9b38da@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r6c91e52b3cc9f4e64afe0f34f20507143fd1f756d12681a56a9b38da@%3Ccommits.pulsar.apache.org%3E
37
reference_url https://lists.apache.org/thread.html/r6d54c2da792c74cc14b9b7665ea89e144c9e238ed478d37fd56292e6@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r6d54c2da792c74cc14b9b7665ea89e144c9e238ed478d37fd56292e6@%3Cdev.atlas.apache.org%3E
38
reference_url https://lists.apache.org/thread.html/r72a3588d62b2de1361dc9648f5d355385735e47f7ba49d089b0e680d@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r72a3588d62b2de1361dc9648f5d355385735e47f7ba49d089b0e680d@%3Ccommon-issues.hadoop.apache.org%3E
39
reference_url https://lists.apache.org/thread.html/r7ce3de03facf7e7f3e24fc25d26d555818519dafdb20f29398a3414b@%3Cdev.phoenix.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7ce3de03facf7e7f3e24fc25d26d555818519dafdb20f29398a3414b@%3Cdev.phoenix.apache.org%3E
40
reference_url https://lists.apache.org/thread.html/r8464b6ec951aace8c807bac9ea526d4f9e3116aa16d38be06f7c6524@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r8464b6ec951aace8c807bac9ea526d4f9e3116aa16d38be06f7c6524@%3Ccommon-issues.hadoop.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/r8b57c57cffa01e418868a3c7535b987635ff1fb5ab534203bfa2d64a@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r8b57c57cffa01e418868a3c7535b987635ff1fb5ab534203bfa2d64a@%3Ccommits.pulsar.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/r900e020760c89f082df1c6e0d46320eba721e4e47bb9eb521e68cd95@%3Ccommits.servicecomb.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r900e020760c89f082df1c6e0d46320eba721e4e47bb9eb521e68cd95@%3Ccommits.servicecomb.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/raebd2019b3da8c2f90f31e8b203b45353f78770ca93bfe5376f5532e@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/raebd2019b3da8c2f90f31e8b203b45353f78770ca93bfe5376f5532e@%3Ccommon-issues.hadoop.apache.org%3E
44
reference_url https://lists.apache.org/thread.html/rb0e033d5ec8233360203431ad96580cf2ec56f47d9a425d894e279c2@%3Cpr.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb0e033d5ec8233360203431ad96580cf2ec56f47d9a425d894e279c2@%3Cpr.cassandra.apache.org%3E
45
reference_url https://lists.apache.org/thread.html/rb34d8d3269ad47a1400f5a1a2d8310e13a80b6576ebd7f512144198d@%3Ccommon-dev.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb34d8d3269ad47a1400f5a1a2d8310e13a80b6576ebd7f512144198d@%3Ccommon-dev.hadoop.apache.org%3E
46
reference_url https://lists.apache.org/thread.html/rb5c33d0069c927fae16084f0605895b98d231d7c48527bcb822ac48c@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb5c33d0069c927fae16084f0605895b98d231d7c48527bcb822ac48c@%3Ccommits.cassandra.apache.org%3E
47
reference_url https://lists.apache.org/thread.html/rb7b28ac741e32dd5edb2c22485d635275bead7290b056ee56baf8ce0@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb7b28ac741e32dd5edb2c22485d635275bead7290b056ee56baf8ce0@%3Cdev.atlas.apache.org%3E
48
reference_url https://lists.apache.org/thread.html/rbaa1f513d903c89a08267c91d86811fa5bcc82e0596b6142c5cea7ea@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rbaa1f513d903c89a08267c91d86811fa5bcc82e0596b6142c5cea7ea@%3Ccommits.cassandra.apache.org%3E
49
reference_url https://lists.apache.org/thread.html/rc3211c71f7e0973a1825d1988a3921288c06cd9d793eae97ecd34948@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc3211c71f7e0973a1825d1988a3921288c06cd9d793eae97ecd34948@%3Ccommits.cassandra.apache.org%3E
50
reference_url https://lists.apache.org/thread.html/rcb2a7037366c58bac6aec6ce3df843a11ef97ae4eb049f05f410eaa5@%3Ccommon-commits.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rcb2a7037366c58bac6aec6ce3df843a11ef97ae4eb049f05f410eaa5@%3Ccommon-commits.hadoop.apache.org%3E
51
reference_url https://lists.apache.org/thread.html/rcb4b61dbe2ed1c7a88781a9aff5a9e7342cc7ed026aec0418ee67596@%3Ccommon-issues.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rcb4b61dbe2ed1c7a88781a9aff5a9e7342cc7ed026aec0418ee67596@%3Ccommon-issues.hadoop.apache.org%3E
52
reference_url https://lists.apache.org/thread.html/rce5c93bba6e815fb62ad38e28ca1943b3019af1eddeb06507ad4e11a@%3Ccommits.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rce5c93bba6e815fb62ad38e28ca1943b3019af1eddeb06507ad4e11a@%3Ccommits.atlas.apache.org%3E
53
reference_url https://lists.apache.org/thread.html/rd582c64f66c354240290072f340505f5d026ca944ec417226bb0272e@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rd582c64f66c354240290072f340505f5d026ca944ec417226bb0272e@%3Ccommits.cassandra.apache.org%3E
54
reference_url https://lists.apache.org/thread.html/rdd34c0479587e32a656d976649409487d51ca0d296b3e26b6b89c3f5@%3Ccommon-commits.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rdd34c0479587e32a656d976649409487d51ca0d296b3e26b6b89c3f5@%3Ccommon-commits.hadoop.apache.org%3E
55
reference_url https://lists.apache.org/thread.html/re791a854001ec1f79cd4f47328b270e7a1d9d7056debb8f16d962722@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/re791a854001ec1f79cd4f47328b270e7a1d9d7056debb8f16d962722@%3Cdev.atlas.apache.org%3E
56
reference_url https://lists.apache.org/thread.html/re851bbfbedd47c690b6e01942acb98ee08bd00df1a94910b905bc8cd@%3Cdev.atlas.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/re851bbfbedd47c690b6e01942acb98ee08bd00df1a94910b905bc8cd@%3Cdev.atlas.apache.org%3E
57
reference_url https://lists.apache.org/thread.html/reb1751562ee5146d3aca654a2df76a2c13d8036645ce69946f9c219e@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/reb1751562ee5146d3aca654a2df76a2c13d8036645ce69946f9c219e@%3Ccommits.cassandra.apache.org%3E
58
reference_url https://lists.apache.org/thread.html/recfe569f4f260328b0036f1c82b2956e864d519ab941a5e75d0d832d@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/recfe569f4f260328b0036f1c82b2956e864d519ab941a5e75d0d832d@%3Ccommits.cassandra.apache.org%3E
59
reference_url https://lists.apache.org/thread.html/rf95bebee6dfcc55067cebe8482bd31e6f481d9f74ba8e03f860c3ec7@%3Ccommits.cassandra.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rf95bebee6dfcc55067cebe8482bd31e6f481d9f74ba8e03f860c3ec7@%3Ccommits.cassandra.apache.org%3E
60
reference_url https://lists.apache.org/thread.html/rfe0aab6c3bebbd9cbfdedb65ff3fdf420714bcb8acdfd346077e1263@%3Ccommon-commits.hadoop.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rfe0aab6c3bebbd9cbfdedb65ff3fdf420714bcb8acdfd346077e1263@%3Ccommon-commits.hadoop.apache.org%3E
61
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA
62
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CKN7VGIKTYBCAKYBRG55QHXAY5UDZ7HA/
63
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6
64
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PTVJC54XGX26UJVVYCXZ7D25X3R5T2G6/
65
reference_url https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.25/usages
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.25/usages
66
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-18640
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-18640
67
reference_url https://security.gentoo.org/glsa/202305-28
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202305-28
68
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
69
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1785376
reference_id 1785376
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1785376
70
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952683
reference_id 952683
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=952683
71
reference_url https://github.com/advisories/GHSA-rvwf-54qp-4r6v
reference_id GHSA-rvwf-54qp-4r6v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rvwf-54qp-4r6v
72
reference_url https://access.redhat.com/errata/RHSA-2020:2603
reference_id RHSA-2020:2603
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:2603
73
reference_url https://access.redhat.com/errata/RHSA-2020:4807
reference_id RHSA-2020:4807
reference_type
scores
url https://access.redhat.com/errata/RHSA-2020:4807
74
reference_url https://access.redhat.com/errata/RHSA-2021:3225
reference_id RHSA-2021:3225
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3225
75
reference_url https://usn.ubuntu.com/7368-1/
reference_id USN-7368-1
reference_type
scores
url https://usn.ubuntu.com/7368-1/
Weaknesses
0
cwe_id 776
name Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
description The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.
1
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-e8hu-czv4-yyc5