CVE-2021-4235

5.5

MEDIUMCVSS v3

Published

December 27, 2022

Affected

7 projects

Assigned by

[email protected]

Severity scale

010

Description

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

yaml

NPMJavaScript parser and stringifier for YAML

< 2.2.3NVD

@types/yaml

NPMStub TypeScript definitions entry for yaml, which provides its own types definitions

< 2.2.3NVD

@azure-tools/yaml

NPM

More on this CVE

NVD↗GitHub Advisory↗

Yaml parser and utilities

< 2.2.3NVD

@stoplight/yaml

NPMUseful functions when working with YAML.

< 2.2.3NVD

stoplightio/yaml

GitHubUseful functions when working with YAML.

< 2.2.3NVD

eemeli/yaml

GitHubYAML parser and serialiser for JavaScript

< 2.2.3NVD

go-yaml/yaml

GitHubYAML support for the Go language.

< 2.2.3NVD

Security Advisories

CVE-2021-4235

Description

More on this CVE