CVE-2023-28118
kaml has potential denial of service while parsing input with anchors and aliases
Résumé
kaml has potential denial of service while parsing input with anchors and aliases
Description d'origine
La description telle que publiée par la source (souvent en anglais).
kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com