The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Jan 10, 2024 | Sep 5, 2022 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade rubygem-mime-typesUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hashieUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade satellite-cliUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-netrcUpgrade rubygem-domain_nameUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauthUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade rubygem-little-pluggerUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-ffi-debugsourceUpgrade rubygem-snaky_hashUpgrade foreman-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-fast_gettextUpgrade rubygem-oauth-tty | May 4, 2023 | Sep 5, 2022 |
| Debian | — | Upgrade snakeyaml | Oct 4, 2022 | Sep 5, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Gentoo Linux | — | Upgrade dev-java/snakeyaml. | May 23, 2023 | Sep 5, 2022 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debugsourceUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-mime-types-dataUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-snaky_hashUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-jwtUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_googleNo solution existsUpgrade satellite-cloneUpgrade rubygem-domain_nameUpgrade rubygem-localeUpgrade rubygem-gssapiUpgrade rubygem-ffi-debuginfoUpgrade satellite-cliUpgrade rubygem-fast_gettextUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debugsourceUpgrade rubygem-http-acceptUpgrade rubygem-amazing_printUpgrade rubygem-unicodeUpgrade rubygem-ffiUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-rest-clientUpgrade rubygem-multi_jsonUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_ansible | May 4, 2023 | Sep 5, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Sep 5, 2022 |
| Suse | — | Upgrade snakeyamlUpgrade snakeyaml-javadoc | Oct 26, 2022 | Sep 5, 2022 |
| Ubuntu | — | Upgrade libyaml-snake-java (Ubuntu Pro)Upgrade libyaml-snake-java | Mar 22, 2023 | Sep 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub