Remarshal Project: Security Vulnerabilities
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-11-13