CVE-2017-18640

7.5

HIGHCVSS v3

Published

December 12, 2019

CVSS v2

5 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

GitHubQuarkus: Supersonic Subatomic Java.

<= 1.3.4NVD

Crates.ioBase library for interacting with Fedora web services

= 31, = 32NVD

Docker Hub

Official Docker builds of Fedora

= 31, = 32NVD

NPMDigital Repository Ireland - fedora backend operations

= 31, = 32NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 31, = 32NVD