中文 English Français Русский Español العربية

Unsafe deserialization vulnerability in SnakeYaml (CVE-2022-1471)

Snyk Blog2022-12-14 08:510 views

SnakeYaml, a YAML 1.1 parser and emitter for Java, has been reported as vulnerable to CVE-2022-1471, a deserialization vulnerability that can lead to arbitrary code execution.

Source：https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471/

My favorites

PreviousTop takeaways from re:Invent 2022 NextAzure Bicep security fundamentals

Mutipath TCP: Use and Detection, (Mon, Nov 2nd)

Last week, an often-ignored TCP option, introduced in 2020, made the news due to a new vulnerability in Linux's implemen

0SANS ISC

AI Vulnerability Finding

A comment : 3% of ‘critical’ software security bugs, in all of recorded history, have been found in the last month. This

0Schneier on Security

[$] Managing the kernel CVE flood

We recently looked at how the kernel community is dealing with the firehose of vulnerability reports, but said little ab

0LWN.net

5 Stars for sale: Inside the underground fake review trade

Article URL: https://www.malwarebytes.com/blog/threat-intel/2026/11/5-stars-for-sale-inside-the-underground-fake-review-

0Hacker News New

Show HN: Hands-on security exercises for students and instructors

Article URL: https://sonukapoor.github.io/cve-lite-classroom/ Comments URL: https://news.ycombinator.com/item?id=5033721

0Hacker News Show

Investors Dish on New Startups & What They'd Back Next

The cybersecurity market is difficult to predict, but a glimpse into the annual DataTribe Challenge shows what's trendin

0Dark Reading