← Database

CVE-2022-25857

HIGH CVSS: 7.5 Published: 2022-08-30 Modified: 2026-06-17

Description

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Affected Platforms

Debian Debian LinuxSnakeyaml Project Snakeyaml

Weakness Type

CWE-776

References