Executive brief
SnakeYAML Entity Expansion during load operation
Affected products
- Maven org.yaml:snakeyaml
Junglewise Threat Intelligence
CVE-2017-18640: SnakeYAML Entity Expansion during load operation
CVE-2017-18640 · Severity: low · CVSS 3.1 · Published 2021-06-04
Technologies: org.yaml:snakeyaml (Maven). Vendors: Maven.
Related threats
- SnakeYaml Constructor Deserialization Remote Code Execution
- Snakeyaml vulnerable to Stack overflow leading to denial of service
- snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds Write
- snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write
- snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds Write