-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.yaml:snakeyaml | maven | < 1.31 | 1.31 |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in object construction during YAML parsing. The Bitbucket issue's stack trace explicitly shows the crash occurring in BaseConstructor.constructObject, which is responsible for recursively building Java objects from YAML nodes. Without proper recursion limits (added in 1.31), malicious nested structures would cause stack exhaustion. This matches the CWE-121 description of stack-based overflow through uncontrolled recursion in object construction.
JavaJavaOngoing coverage of React2Shell