Back

HIGH

Excessive resource consumption in gopkg.in/yaml.v2

Published Dec 27, 2022

Description

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

Affected products

Remediation

Red Hat statement

RHC package for Red Hat Enterprise Linux 9 mark as Low severity as we do ship the affected code but it's not easily exposed because YAML files are not parsed by RHC.

References (16)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Go
Published Dec 27, 2022
Updated Apr 14, 2025
Reserved Aug 30, 2022
CISA Vulnrichment
Updated Apr 14, 2025
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity Important
Public date Aug 29, 2022
ENISA EUVD
Assigner Go
Published Dec 27, 2022
Updated Apr 14, 2025
Exploited since n/a
EUVD-2022-7537 GHSA-6Q6Q-88XP-6F2R