Search for packages
| purl | pkg:deb/debian/golang-yaml.v2@2.2.2-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-k874-59fj-9fcg
Aliases: CVE-2021-4235 GHSA-r88r-gmrh-7j83 |
YAML Go package vulnerable to denial of service Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector. |
Affected by 0 other vulnerabilities. |
|
VCID-tn6y-xfkz-83e4
Aliases: CVE-2022-3064 GHSA-6q6q-88xp-6f2r |
yaml package for Go can consume excessive amounts of CPU or memory Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||