CVE-2022-25857

Name of the Vulnerable Software and Affected Versions org.yaml:snakeyaml versions 0 through 1.30

Description The issue is related to a Denial of Service (DoS) vulnerability due to missing nested depth limitation for collections in the SnakeYAML library, which is used for serialization and deserialization of YAML documents. This vulnerability can be exploited by a remote attacker to cause a service disruption.

Recommendations For versions 0 through 1.30, update to version 1.31 or later to resolve the issue. As a temporary workaround, consider restricting the use of the SnakeYAML library to minimize the risk of exploitation.