Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade udicaUpgrade podmanUpgrade buildah-testsUpgrade toolbox-testsUpgrade criuUpgrade podman-pluginsUpgrade podman-testsUpgrade python3-criuUpgrade podman-catatonitUpgrade crunUpgrade skopeoUpgrade cockpit-podmanUpgrade buildahUpgrade podman-remoteUpgrade runcUpgrade podman-dockerUpgrade containernetworking-pluginsUpgrade critUpgrade fuse-overlayfsUpgrade libslirpUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade podman-gvproxyUpgrade criu-develUpgrade containers-commonUpgrade netavarkUpgrade conmonUpgrade toolboxUpgrade skopeo-testsUpgrade python3-podmanUpgrade libslirp-devel | Nov 16, 2023 | Dec 27, 2022 |
| Alpine Linux | — | Upgrade yaml | Mar 21, 2024 | Dec 27, 2022 |
| Centos_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade runcUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade toolbox-testsUpgrade crunUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade buildah-tests-debuginfoUpgrade toolbox-debuginfoUpgrade criuUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade criu-libs-debuginfoUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade udicaUpgrade python3-criuUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade podman-dockerUpgrade libslirpUpgrade buildahUpgrade buildah-testsUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-podmanUpgrade podman-pluginsUpgrade podman-remote-debuginfoUpgrade containernetworking-pluginsUpgrade critUpgrade fuse-overlayfs-debugsourceUpgrade slirp4netns-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade containers-common | Nov 8, 2023 | Dec 27, 2022 |
| Debian | — | Upgrade golang-yaml.v2 | Jul 10, 2023 | Dec 27, 2022 |
| Oracle_linux | — | Upgrade buildahUpgrade netavarkUpgrade podman-remoteUpgrade podmanUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade udicaUpgrade buildah-testsUpgrade criuUpgrade skopeoUpgrade crunUpgrade critUpgrade podman-catatonitUpgrade runcUpgrade aardvark-dnsUpgrade containers-commonUpgrade python3-podmanUpgrade slirp4netnsUpgrade conmonUpgrade python3-criuUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade cockpit-podmanUpgrade criu-develUpgrade criu-libsUpgrade podman-gvproxyUpgrade container-selinuxUpgrade libslirpUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-plugins | Nov 22, 2023 | Aug 29, 2022 |
| Redhat_linux | — | No solution existsUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade critUpgrade slirp4netns-debugsourceUpgrade podman-plugins-debuginfoUpgrade criuUpgrade conmon-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade crunUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade podmanUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade rhc-debuginfoUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade podman-dockerUpgrade podman-catatonitUpgrade container-selinuxUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade rhc-develUpgrade criu-libsUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade runc-debuginfoUpgrade buildahUpgrade rhcUpgrade slirp4netnsUpgrade python3-podmanUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-debuginfoUpgrade containers-commonUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade skopeoUpgrade podman-pluginsUpgrade buildah-debugsourceUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade rhc-debugsourceUpgrade podman-testsUpgrade netavarkUpgrade fuse-overlayfs-debugsource | Nov 8, 2023 | Dec 27, 2022 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade crunUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade containers-commonUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade libslirpUpgrade criu-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade critUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade criuUpgrade buildahUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade podman-testsUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade podman-catatonitUpgrade conmon-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Ubuntu | — | Upgrade golang-yaml.v2-devUpgrade golang-gopkg-yaml.v2-dev (Ubuntu Pro)Upgrade golang-yaml.v2-dev (Ubuntu Pro)Upgrade golang-gopkg-yaml.v2-dev | Aug 15, 2023 | Dec 27, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub