CVE-2023-47163

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack

published November 13, 2023

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00970 · 61.5th percentile
Published
2023-11-13T02:26Z
EPSS history
Timeline
  • 13 NOV 02:26Z
    Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack
    cvelistv5