CVE-2021-4235: Yaml Project Yaml

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be used as a denial of service vector.

Affected products

• Yaml Project Yaml: before 2.2.3 (fixed in 2.2.3)

Published 2022-12-27. Last modified 2026-06-17.