CVE-2022-25857: Debian Linux

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Affected products

• Debian Debian Linux: version 10.0 only
• Snakeyaml Project Snakeyaml: before 1.31 (fixed in 1.31)

Published 2022-08-30. Last modified 2026-06-17.