CVE-2020-8441: Jyaml Project Jyaml

Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days.

JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.

Affected products

• Jyaml Project Jyaml: up to and including 1.3

Published 2020-02-19. Last modified 2026-06-17.