← Back

Remarshal

remarshal

Vendor: Remarshal Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Remarshal Project
1Remarshal
Jun 17, 2026
Nov 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.