VDB
GHSA-v84h-mwmj-46pf
GHSA-v84h-mwmj-46pf
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published May 13, 2022
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.
Risk scores
CVSS 3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-v84h-mwmj-46pf
vulnetix vdb fixes GHSA-v84h-mwmj-46pfOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-v84h-mwmj-46pf/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart