Search for packages
Package details: pkg:deb/debian/golang-yaml.v2@2.2.2-1
purl pkg:deb/debian/golang-yaml.v2@2.2.2-1
Next non-vulnerable version 2.2.8-1
Latest non-vulnerable version 2.2.8-1
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-8fxt-rezc-aaan
Aliases:
CVE-2022-3064
GHSA-6q6q-88xp-6f2r
Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
2.2.8-1
Affected by 0 other vulnerabilities.
VCID-r6k8-p4aa-aaaa
Aliases:
CVE-2021-4235
GHSA-r88r-gmrh-7j83
Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.
2.2.8-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T15:28:49.977769+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T11:25:12.143428+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T07:07:52.536387+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan None 36.1.3
2025-06-21T07:03:22.056836+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa None 36.1.3
2025-06-21T03:20:06.172535+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 36.1.3
2025-06-20T21:55:52.467340+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 36.1.3
2025-06-08T08:23:22.799282+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T04:47:30.294461+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T00:47:35.608930+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan None 36.1.0
2025-06-08T00:43:05.674882+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa None 36.1.0
2025-04-12T19:42:04.661124+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T19:38:06.900510+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T06:54:43.992708+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T03:18:34.597960+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T23:19:58.258115+00:00 Debian Oval Importer Affected by VCID-8fxt-rezc-aaan None 36.0.0
2025-04-07T23:15:23.322282+00:00 Debian Oval Importer Affected by VCID-r6k8-p4aa-aaaa None 36.0.0
2025-04-04T06:07:52.258878+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 36.0.0
2025-04-04T00:33:41.807960+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 36.0.0
2025-02-20T21:27:55.604080+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 35.1.0
2025-02-20T07:01:13.572086+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 35.1.0
2024-11-23T13:47:24.596833+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 35.0.0
2024-11-23T00:45:26.812615+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 35.0.0
2024-10-10T11:41:23.432621+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 34.0.2
2024-10-09T23:11:34.671502+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 34.0.2
2024-09-19T18:14:53.477320+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 34.0.1
2024-09-19T07:03:08.312126+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 34.0.1
2024-04-25T15:07:44.292417+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 34.0.0rc4
2024-04-25T05:19:30.130383+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 34.0.0rc4
2024-01-11T17:45:07.278743+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 34.0.0rc2
2024-01-11T07:03:41.634653+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 34.0.0rc2
2024-01-05T01:58:19.176706+00:00 Debian Importer Affected by VCID-8fxt-rezc-aaan None 34.0.0rc1
2024-01-04T17:56:51.081467+00:00 Debian Importer Affected by VCID-r6k8-p4aa-aaaa None 34.0.0rc1