Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sqsn-ygsg-yfdu
Summary
Snakeyaml vulnerable to Stack overflow leading to denial of service
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.
Aliases
0
alias CVE-2022-41854
1
alias GHSA-w37g-rhq8-7m4j
Fixed_packages
0
url pkg:deb/debian/snakeyaml@1.33-1?distro=trixie
purl pkg:deb/debian/snakeyaml@1.33-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-1%3Fdistro=trixie
1
url pkg:deb/debian/snakeyaml@1.33-2?distro=trixie
purl pkg:deb/debian/snakeyaml@1.33-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-2%3Fdistro=trixie
2
url pkg:deb/debian/snakeyaml@1.33-2
purl pkg:deb/debian/snakeyaml@1.33-2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.33-2
3
url pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie
purl pkg:deb/debian/snakeyaml@2.0%2Bds%2Breally1.33-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.0%252Bds%252Breally1.33-1%3Fdistro=trixie
4
url pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie
purl pkg:deb/debian/snakeyaml@2.5%2Bds-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@2.5%252Bds-1%3Fdistro=trixie
5
url pkg:maven/org.yaml/snakeyaml@1.32
purl pkg:maven/org.yaml/snakeyaml@1.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dmkc-42vj-gbhc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.32
Affected_packages
0
url pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fb8u-g65k-hffs
1
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2%3Fdistro=trixie
1
url pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2
purl pkg:deb/debian/snakeyaml@1.28-1%2Bdeb11u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fb8u-g65k-hffs
1
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/snakeyaml@1.28-1%252Bdeb11u2
2
url pkg:maven/org.yaml/snakeyaml@1.4
purl pkg:maven/org.yaml/snakeyaml@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.4
3
url pkg:maven/org.yaml/snakeyaml@1.5
purl pkg:maven/org.yaml/snakeyaml@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.5
4
url pkg:maven/org.yaml/snakeyaml@1.6
purl pkg:maven/org.yaml/snakeyaml@1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.6
5
url pkg:maven/org.yaml/snakeyaml@1.7
purl pkg:maven/org.yaml/snakeyaml@1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.7
6
url pkg:maven/org.yaml/snakeyaml@1.8
purl pkg:maven/org.yaml/snakeyaml@1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.8
7
url pkg:maven/org.yaml/snakeyaml@1.9
purl pkg:maven/org.yaml/snakeyaml@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.9
8
url pkg:maven/org.yaml/snakeyaml@1.10
purl pkg:maven/org.yaml/snakeyaml@1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.10
9
url pkg:maven/org.yaml/snakeyaml@1.11
purl pkg:maven/org.yaml/snakeyaml@1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.11
10
url pkg:maven/org.yaml/snakeyaml@1.12
purl pkg:maven/org.yaml/snakeyaml@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.12
11
url pkg:maven/org.yaml/snakeyaml@1.13
purl pkg:maven/org.yaml/snakeyaml@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.13
12
url pkg:maven/org.yaml/snakeyaml@1.14
purl pkg:maven/org.yaml/snakeyaml@1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.14
13
url pkg:maven/org.yaml/snakeyaml@1.15
purl pkg:maven/org.yaml/snakeyaml@1.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.15
14
url pkg:maven/org.yaml/snakeyaml@1.16
purl pkg:maven/org.yaml/snakeyaml@1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.16
15
url pkg:maven/org.yaml/snakeyaml@1.17
purl pkg:maven/org.yaml/snakeyaml@1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.17
16
url pkg:maven/org.yaml/snakeyaml@1.18
purl pkg:maven/org.yaml/snakeyaml@1.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.18
17
url pkg:maven/org.yaml/snakeyaml@1.19
purl pkg:maven/org.yaml/snakeyaml@1.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.19
18
url pkg:maven/org.yaml/snakeyaml@1.20
purl pkg:maven/org.yaml/snakeyaml@1.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.20
19
url pkg:maven/org.yaml/snakeyaml@1.21
purl pkg:maven/org.yaml/snakeyaml@1.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.21
20
url pkg:maven/org.yaml/snakeyaml@1.22
purl pkg:maven/org.yaml/snakeyaml@1.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.22
21
url pkg:maven/org.yaml/snakeyaml@1.23
purl pkg:maven/org.yaml/snakeyaml@1.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.23
22
url pkg:maven/org.yaml/snakeyaml@1.24
purl pkg:maven/org.yaml/snakeyaml@1.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.24
23
url pkg:maven/org.yaml/snakeyaml@1.25
purl pkg:maven/org.yaml/snakeyaml@1.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-e8hu-czv4-yyc5
4
vulnerability VCID-fb8u-g65k-hffs
5
vulnerability VCID-mm3e-4pej-byed
6
vulnerability VCID-qxfs-sq38-jfad
7
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.25
24
url pkg:maven/org.yaml/snakeyaml@1.26
purl pkg:maven/org.yaml/snakeyaml@1.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.26
25
url pkg:maven/org.yaml/snakeyaml@1.27
purl pkg:maven/org.yaml/snakeyaml@1.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.27
26
url pkg:maven/org.yaml/snakeyaml@1.28
purl pkg:maven/org.yaml/snakeyaml@1.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.28
27
url pkg:maven/org.yaml/snakeyaml@1.29
purl pkg:maven/org.yaml/snakeyaml@1.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.29
28
url pkg:maven/org.yaml/snakeyaml@1.30
purl pkg:maven/org.yaml/snakeyaml@1.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nu3-fknt-puej
1
vulnerability VCID-6354-p39b-zbhp
2
vulnerability VCID-dmkc-42vj-gbhc
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-mm3e-4pej-byed
5
vulnerability VCID-qxfs-sq38-jfad
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.30
29
url pkg:maven/org.yaml/snakeyaml@1.31
purl pkg:maven/org.yaml/snakeyaml@1.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dmkc-42vj-gbhc
1
vulnerability VCID-fb8u-g65k-hffs
2
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.yaml/snakeyaml@1.31
30
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el7eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el7eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4s4f-emvn-9bhh
1
vulnerability VCID-dmkc-42vj-gbhc
2
vulnerability VCID-fb8u-g65k-hffs
3
vulnerability VCID-knw5-d2nn-vyhq
4
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el7eap
31
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el8eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el8eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4s4f-emvn-9bhh
1
vulnerability VCID-dmkc-42vj-gbhc
2
vulnerability VCID-fb8u-g65k-hffs
3
vulnerability VCID-knw5-d2nn-vyhq
4
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el8eap
32
url pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el9eap
purl pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1?arch=el9eap
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4s4f-emvn-9bhh
1
vulnerability VCID-dmkc-42vj-gbhc
2
vulnerability VCID-fb8u-g65k-hffs
3
vulnerability VCID-knw5-d2nn-vyhq
4
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-snakeyaml@1.33.0-2.SP1_redhat_00001.1%3Farch=el9eap
33
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el8sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el8sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4e5q-x177-uyat
1
vulnerability VCID-4s4f-emvn-9bhh
2
vulnerability VCID-etyq-9yys-tkdf
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-jz3d-vvfb-jfbw
5
vulnerability VCID-qruf-r6dc-3ugj
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1%3Farch=el8sso
34
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el7sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el7sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4e5q-x177-uyat
1
vulnerability VCID-4s4f-emvn-9bhh
2
vulnerability VCID-etyq-9yys-tkdf
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-jz3d-vvfb-jfbw
5
vulnerability VCID-qruf-r6dc-3ugj
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1%3Farch=el7sso
35
url pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el9sso
purl pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1?arch=el9sso
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4e5q-x177-uyat
1
vulnerability VCID-4s4f-emvn-9bhh
2
vulnerability VCID-etyq-9yys-tkdf
3
vulnerability VCID-fb8u-g65k-hffs
4
vulnerability VCID-jz3d-vvfb-jfbw
5
vulnerability VCID-qruf-r6dc-3ugj
6
vulnerability VCID-sqsn-ygsg-yfdu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-sso7-keycloak@18.0.7-1.redhat_00001.1%3Farch=el9sso
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41854.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41854.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-41854
reference_id
reference_type
scores
0
value 0.00077
scoring_system epss
scoring_elements 0.23025
published_at 2026-04-16T12:55:00Z
1
value 0.00077
scoring_system epss
scoring_elements 0.23012
published_at 2026-04-13T12:55:00Z
2
value 0.00077
scoring_system epss
scoring_elements 0.23068
published_at 2026-04-12T12:55:00Z
3
value 0.00077
scoring_system epss
scoring_elements 0.23105
published_at 2026-04-11T12:55:00Z
4
value 0.00077
scoring_system epss
scoring_elements 0.23124
published_at 2026-04-02T12:55:00Z
5
value 0.00077
scoring_system epss
scoring_elements 0.23168
published_at 2026-04-04T12:55:00Z
6
value 0.00077
scoring_system epss
scoring_elements 0.22959
published_at 2026-04-07T12:55:00Z
7
value 0.00077
scoring_system epss
scoring_elements 0.23032
published_at 2026-04-08T12:55:00Z
8
value 0.00077
scoring_system epss
scoring_elements 0.23085
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-41854
2
reference_url https://bitbucket.org/snakeyaml/snakeyaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml
3
reference_url https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a
4
reference_url https://bitbucket.org/snakeyaml/snakeyaml/issues/531
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bitbucket.org/snakeyaml/snakeyaml/issues/531
5
reference_url https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
6
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41854
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41854
7
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-41854
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-41854
15
reference_url https://security.netapp.com/advisory/ntap-20240315-0009
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20240315-0009
16
reference_url https://security.netapp.com/advisory/ntap-20240621-0006
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20240621-0006
17
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2151988
reference_id 2151988
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2151988
18
reference_url https://github.com/advisories/GHSA-w37g-rhq8-7m4j
reference_id GHSA-w37g-rhq8-7m4j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w37g-rhq8-7m4j
19
reference_url https://access.redhat.com/errata/RHSA-2023:0577
reference_id RHSA-2023:0577
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0577
20
reference_url https://access.redhat.com/errata/RHSA-2023:2100
reference_id RHSA-2023:2100
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2100
21
reference_url https://access.redhat.com/errata/RHSA-2023:2705
reference_id RHSA-2023:2705
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2705
22
reference_url https://access.redhat.com/errata/RHSA-2023:2706
reference_id RHSA-2023:2706
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2706
23
reference_url https://access.redhat.com/errata/RHSA-2023:2707
reference_id RHSA-2023:2707
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2707
24
reference_url https://access.redhat.com/errata/RHSA-2023:2710
reference_id RHSA-2023:2710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2710
25
reference_url https://access.redhat.com/errata/RHSA-2023:2713
reference_id RHSA-2023:2713
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2713
26
reference_url https://access.redhat.com/errata/RHSA-2023:3373
reference_id RHSA-2023:3373
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3373
27
reference_url https://access.redhat.com/errata/RHSA-2023:3641
reference_id RHSA-2023:3641
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3641
28
reference_url https://access.redhat.com/errata/RHSA-2023:4627
reference_id RHSA-2023:4627
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4627
29
reference_url https://access.redhat.com/errata/RHSA-2023:4983
reference_id RHSA-2023:4983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4983
30
reference_url https://access.redhat.com/errata/RHSA-2023:7697
reference_id RHSA-2023:7697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7697
Weaknesses
0
cwe_id 121
name Stack-based Buffer Overflow
description A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
1
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sqsn-ygsg-yfdu