CVE-2023-39106: Alibabacloud Nacos Spring Project

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.

Affected products

• Alibabacloud Nacos Spring Project: up to and including 1.1.1

Published 2023-08-21. Last modified 2026-06-17.