CVE-2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564

published December 12, 2019

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26723 · 98.0th percentile
Published
2019-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564
    cvelistv5