Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2023-28118
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-20 Mar, 2023 | 13:15
Updated At-24 Mar, 2023 | 18:00

kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input containing anchors and aliases may consume excessive memory and crash. Version 0.53.0 and later default to refusing to parse YAML documents containing anchors and aliases. There are no known workarounds.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Primary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Secondary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CPE Matches
kaml_project
kaml_project
>>kaml>>Versions before 0.53.0(exclusive)
cpe:2.3:a:kaml_project:kaml:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-776Primarysecurity-advisories@github.com
CWE ID: CWE-776
Type: Primary
Source: security-advisories@github.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531asecurity-advisories@github.com
Patch
https://github.com/charleskorn/kaml/releases/tag/0.53.0security-advisories@github.com
Release Notes
https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48security-advisories@github.com
Vendor Advisory
Hyperlink: https://github.com/charleskorn/kaml/commit/5f82a2d7e00bfc307afca05d1dc4d7c50593531a
Source: security-advisories@github.com
Resource:
Patch
Hyperlink: https://github.com/charleskorn/kaml/releases/tag/0.53.0
Source: security-advisories@github.com
Resource:
Release Notes
Hyperlink: https://github.com/charleskorn/kaml/security/advisories/GHSA-c24f-2j3g-rg48
Source: security-advisories@github.com
Resource:
Vendor Advisory
Change History
0Changes found
Details not found