Release | Version |
---|---|
buster | 2.2.2-1 |
bullseye | 2.4.0-1 |
bookworm | 2.4.0-4 |
sid | 2.4.0-4 |
Bug | buster | bullseye | bookworm | sid | Description |
---|---|---|---|---|---|
CVE-2022-3064 | vulnerable | fixed | fixed | fixed | Parsing malicious or large YAML documents can consume excessive amount ... |
CVE-2021-4235 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | Due to unbounded alias chasing, a maliciously crafted YAML file can ca ... |