Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade python3-podmanUpgrade toolboxUpgrade conmonUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade containers-commonUpgrade criu-libsUpgrade criu-develUpgrade skopeo-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade container-selinuxUpgrade fuse-overlayfsUpgrade buildahUpgrade containernetworking-pluginsUpgrade crunUpgrade udicaUpgrade skopeoUpgrade podmanUpgrade buildah-testsUpgrade podman-remoteUpgrade cockpit-podmanUpgrade podman-testsUpgrade podman-pluginsUpgrade critUpgrade podman-dockerUpgrade runcUpgrade python3-criuUpgrade podman-catatonitUpgrade criu | Nov 16, 2023 | Dec 27, 2022 |
| Alpine Linux | — | Upgrade yaml | Mar 21, 2024 | Dec 27, 2022 |
| Centos_linux | — | Upgrade podman-remoteUpgrade podmanUpgrade podman-debugsourceUpgrade netavarkUpgrade podman-testsUpgrade podman-catatonitUpgrade crun-debuginfoUpgrade criuUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade python3-criuUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade python3-podmanUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade skopeo-debuginfoUpgrade buildahUpgrade podman-dockerUpgrade libslirpUpgrade toolbox-debugsourceUpgrade fuse-overlayfsUpgrade conmonUpgrade libslirp-debuginfoUpgrade skopeoUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade criu-debugsourceUpgrade criu-libsUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade toolboxUpgrade criu-develUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade containers-commonUpgrade containernetworking-plugins-debugsource | Nov 8, 2023 | Dec 27, 2022 |
| Debian | — | Upgrade golang-yaml.v2 | Jul 10, 2023 | Dec 27, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade aardvark-dnsUpgrade buildahUpgrade podman-remoteUpgrade runcUpgrade netavarkUpgrade critUpgrade podmanUpgrade buildah-testsUpgrade crunUpgrade criuUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade udicaUpgrade conmonUpgrade python3-criuUpgrade skopeo-testsUpgrade criu-libsUpgrade slirp4netnsUpgrade python3-podmanUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-testsUpgrade libslirpUpgrade podman-pluginsUpgrade libslirp-develUpgrade criu-develUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-common | Nov 22, 2023 | Aug 29, 2022 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade crun-debuginfoUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade libslirpUpgrade libslirp-develUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade conmonUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade netavarkUpgrade buildah-debugsourceUpgrade rhc-debugsourceUpgrade podman-pluginsUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade buildahUpgrade skopeoUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade rhcUpgrade oci-seccomp-bpf-hookUpgrade rhc-develUpgrade skopeo-debuginfoUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade criu-develUpgrade slirp4netns-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade crunUpgrade slirp4netns-debugsourceNo solution existsUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade podmanUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade rhc-debuginfoUpgrade udicaUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade criuUpgrade libslirp-debugsourceUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dnsUpgrade python3-criuUpgrade container-selinuxUpgrade podman-catatonitUpgrade runcUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade conmon-debuginfo | Nov 8, 2023 | Dec 27, 2022 |
| Rocky_linux | — | Upgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirpUpgrade buildah-testsUpgrade critUpgrade buildahUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade buildah-debuginfoUpgrade criuUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade crun-debuginfoUpgrade podman-debuginfoUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade runcUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade podman-debugsourceUpgrade criu-develUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podman-pluginsUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podmanUpgrade criu-libsUpgrade podman-remoteUpgrade slirp4netns-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Ubuntu | — | Upgrade golang-gopkg-yaml.v2-dev (Ubuntu Pro)Upgrade golang-yaml.v2-dev (Ubuntu Pro)Upgrade golang-gopkg-yaml.v2-devUpgrade golang-yaml.v2-dev | Aug 15, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub