com.charleskorn.kaml:kaml (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package com.charleskorn.kaml:kaml, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-28118 — CVSS 7.5 (high): kaml provides YAML support for kotlinx.serialization. Prior to version 0.53.0, applications that use kaml to parse untrusted input…
• CVE-2021-39194 — CVSS 4.3 (medium): kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could…