Taichi Kotake

The issue allows for the expansion of YAML alias nodes unlimitedly, making Remarshal susceptible to a Billion Laughs Attack. This can lead to a denial-of-service (DoS) condition when processing untrusted YAML files.

untangle is a python library to convert XML data to python objects. It improperly restricts XML external entity references, allowing a remote unauthenticated attacker to read the contents of local files by exploiting this issue.

The issue is related to the improper restriction of recursive entity references in DTDs, which can be exploited by a remote unauthenticated attacker to cause a denial-of-service (DoS) condition on the server where the product is running.

The issue allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack. This is achieved by using Java Reflection API of JavaScript code on WebView.