CVE-2024-28212

9.8 criticalEPSS 1.0%

Critical (9.8) in naver ngrinder. EPSS 1.0% chance of exploitation in the next 30 days.

nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via unsafe deserialization.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2024-03-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19