GHSA-hp87-p4gw-j4gq
gopkg.in/yaml.v3 Denial of Service
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2022-28948
- Alias
- GO-2022-0603
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue in the Unmarshal function in Go-Yaml v3 can cause a program to panic when attempting to deserialize invalid input.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · gopkg.in/yaml.v3 | introduced 0, fixed 3.0.1 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2022-28948 ADVISORY
- https://github.com/go-yaml/yaml/issues/665 WEB
- https://github.com/go-yaml/yaml/issues/666 WEB
- https://github.com/go-yaml/yaml/commit/8f96da9f5d5eff988554c1aae1784627c4bf6754 WEB
- https://github.com/go-yaml/yaml/commit/f6f7691b1fdeb513f56608cd2c32c51f8194bf51 WEB
- https://github.com/go-yaml/yaml PACKAGE
- https://security.netapp.com/advisory/ntap-20220923-0006 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |