vulnerability

Red Hat OpenShift: CVE-2022-25857: snakeyaml: Denial of Service due to missing nested depth limitation for collections

Name: Red Hat OpenShift: CVE-2022-25857: snakeyaml: Denial of Service due to missing nested depth limitation for collections
Creator: Red Hat
Published: 2022-08-30T00:00:00.000Z
Keywords: CVE, CWE-776, Red Hat OpenShift, 2022, 25857, snakeyaml, linuxrpm-upgrade-jenkins-2-plugins, Severity 8

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

Aug 30, 2022

Added

Feb 9, 2023

Modified

Jun 17, 2026

Description

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Solution

linuxrpm-upgrade-jenkins-2-plugins

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report