Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade podman-testsUpgrade cockpit-podmanUpgrade buildahUpgrade runcUpgrade python3-criuUpgrade podmanUpgrade critUpgrade crunUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade criuUpgrade podman-catatonitUpgrade toolbox-testsUpgrade podman-remoteUpgrade podman-pluginsUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade udicaUpgrade toolboxUpgrade skopeo-testsUpgrade netavarkUpgrade python3-podmanUpgrade criu-develUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade libslirp-develUpgrade slirp4netnsUpgrade criu-libsUpgrade libslirpUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade containers-common | Nov 16, 2023 | Dec 27, 2022 |
| Alpine Linux | — | Upgrade yaml | Mar 21, 2024 | Dec 27, 2022 |
| Centos_linux | — | Upgrade libslirp-debugsourceUpgrade libslirp-develUpgrade skopeoUpgrade netavarkUpgrade conmonUpgrade skopeo-debuginfoUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade libslirpUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade udicaUpgrade python3-criuUpgrade container-selinuxUpgrade podman-catatonitUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade fuse-overlayfsUpgrade crun-debuginfoUpgrade criuUpgrade runc-debugsourceUpgrade toolbox-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade slirp4netnsUpgrade buildah-debuginfoUpgrade cockpit-podmanUpgrade toolbox-debuginfoUpgrade python3-podmanUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade podman-gvproxyUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade critUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade podmanUpgrade libslirp-debuginfoUpgrade toolboxUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade criu-devel | Nov 8, 2023 | Dec 27, 2022 |
| Debian | — | Upgrade golang-yaml.v2 | Jul 10, 2023 | Dec 27, 2022 |
| Oracle_linux | — | Upgrade skopeoUpgrade buildah-testsUpgrade podman-catatonitUpgrade critUpgrade udicaUpgrade podman-remoteUpgrade podman-dockerUpgrade netavarkUpgrade crunUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade criuUpgrade runcUpgrade containernetworking-pluginsUpgrade buildahUpgrade podmanUpgrade criu-develUpgrade slirp4netnsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade python3-criuUpgrade skopeo-testsUpgrade podman-testsUpgrade libslirpUpgrade criu-libsUpgrade podman-pluginsUpgrade conmonUpgrade python3-podmanUpgrade podman-gvproxyUpgrade libslirp-devel | Nov 22, 2023 | Aug 29, 2022 |
| Redhat_linux | — | Upgrade podman-gvproxyUpgrade fuse-overlayfs-debuginfoUpgrade runc-debuginfoUpgrade skopeo-debuginfoUpgrade rhc-develUpgrade containers-commonUpgrade rhcUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade python3-podmanUpgrade fuse-overlayfs-debugsourceUpgrade crun-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade cockpit-podmanUpgrade libslirpUpgrade libslirp-develUpgrade conmon-debugsourceUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade toolboxUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade criu-libsUpgrade fuse-overlayfsUpgrade rhc-debugsourceUpgrade buildahUpgrade skopeoUpgrade conmonUpgrade netavarkUpgrade buildah-debugsourceUpgrade skopeo-debugsourceUpgrade podman-debuginfoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuNo solution existsUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade udicaUpgrade podman-plugins-debuginfoUpgrade conmon-debuginfoUpgrade criu-develUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade critUpgrade podman-remoteUpgrade toolbox-testsUpgrade podmanUpgrade libslirp-debuginfoUpgrade criuUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade runcUpgrade podman-catatonitUpgrade podman-dockerUpgrade criu-libs-debuginfoUpgrade rhc-debuginfoUpgrade podman-debugsourceUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfo | Nov 8, 2023 | Dec 27, 2022 |
| Rocky_linux | — | Upgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade criu-libsUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade conmonUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-develUpgrade crunUpgrade containers-commonUpgrade netavarkUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-debugsourceUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade criu-libs-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirpUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade critUpgrade buildah-testsUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade fuse-overlayfsUpgrade conmon-debugsourceUpgrade criuUpgrade buildah-debuginfo | Dec 1, 2025 | Nov 28, 2025 |
| Ubuntu | — | Upgrade golang-gopkg-yaml.v2-dev (Ubuntu Pro)Upgrade golang-yaml.v2-dev (Ubuntu Pro)Upgrade golang-gopkg-yaml.v2-devUpgrade golang-yaml.v2-dev | Aug 15, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub