description: Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
problem types: Uncontrolled Recursion
affected:
{
vendor: Remarshal-project
product: Remarshal
versions:
version: prior to v0.17.1, status: affected
}