Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

2022-12-14来源 Snyk BlogEnglish
Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)
SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.

原文:https://www.a8q9.cn/en/article/unsafe-deserialization-vulnerability-in-snakeyaml-cve-2022-1471-f1e777.html

相关文章