Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)
CYBERSECURITY FEATURED ANALYSIS

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

SOURCE

Blog RSS Feed | Snyk

DATE

READ

1 min read

SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.

SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.