Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-r88r-gmrh-7j83
  • Go/github.com/go-yaml/yaml
  • Go/gopkg.in/yaml.v2
YAML Go package vulnerable to denial of service 28 Dec 2022
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-6q6q-88xp-6f2r
  • Go/gopkg.in/yaml.v2
yaml package for Go can consume excessive amounts of CPU or memory 28 Dec 2022
  • Fix available
  • Severity - 7.5 (High)
GO-2022-0956
  • Go/gopkg.in/yaml.v2
Excessive resource consumption in gopkg.in/yaml.v2 29 Aug 2022
  • Fix available
GHSA-wxc4-f4m6-wwqv
  • Go/github.com/go-yaml/yaml
  • Go/gopkg.in/yaml.v2
Excessive Platform Resource Consumption within a Loop in Kubernetes 20 Dec 2021
  • Fix available
  • Severity - 6.5 (Medium)
GO-2020-0036
  • Go/github.com/go-yaml/yaml
  • Go/gopkg.in/yaml.v2
Excessive resource consumption in YAML parsing in gopkg.in/yaml.v2 14 Apr 2021
  • Fix available
GO-2021-0061
  • Go/github.com/go-yaml/yaml
  • Go/gopkg.in/yaml.v2
Denial of service in gopkg.in/yaml.v2 14 Apr 2021
  • Fix available