Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
{ "nvd_published_at": "2023-11-13T03:15:09Z", "cwe_ids": [ "CWE-400", "CWE-674" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-11-14T22:19:05Z" }