github.com/go-yaml/yaml (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/go-yaml/yaml, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2019-11254 — CVSS 6.5 (medium): The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who…
• CVE-2021-4235 — CVSS 5.5 (medium): Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing…