Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)
2022-12-14来源 Snyk BlogEnglish
SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.