CVE-2022-28948

7.5

HIGHCVSS v3

Published

May 19, 2022

CVSS v2

5 MEDIUM

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.

NPMJavaScript parser and stringifier for YAML

= 3.0.0NVD

NPMStub TypeScript definitions entry for yaml, which provides its own types definitions

= 3.0.0NVD

NPM

Yaml parser and utilities

= 3.0.0NVD

NPMUseful functions when working with YAML.

= 3.0.0NVD

GitHubUseful functions when working with YAML.

= 3.0.0NVD

GitHubYAML parser and serialiser for JavaScript

= 3.0.0NVD

GitHubYAML support for the Go language.

= 3.0.0NVD