CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-28948
High (7.5). EPSS 4.0% chance of exploitation in the next 30 days. Fixed in gopkg.in/yaml.v3 3.0.0-20220521103104-8f96da9f5d5e, 3.0.1.
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.
Severity
- EPSS
- 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netapp:astra_trident
- yaml_project:yaml
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hp87-p4gw-j4gq | Go | gopkg.in/yaml.v3 | <3.0.1 | 3.0.1 |
| GO-2022-0603 | Go | gopkg.in/yaml.v3 | <3.0.0-20220521103104-8f96da9f5d5e | 3.0.0-20220521103104-8f96da9f5d5e |