Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-24621

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-jm7r-4pg6-gf26

Esoteric YamlBeans Unsafe Deserialization vulnerability An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.

gitlab/maven/com.esotericsoftware.yamlbeans/yamlbeans/CVE-2023-24621

Esoteric YamlBeans Unsafe Deserialization vulnerability An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by default, where the data and class are controlled by the author of the YAML document being processed.