title: Excessive resource consumption in gopkg.in/yaml.v2
description: Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.
problem types: CWE 400: Uncontrolled Resource Consumption
affected:
{
vendor: gopkg.in/yaml.v2
product: gopkg.in/yaml.v2
collectionURL: https://pkg.go.dev
packageName: gopkg.in/yaml.v2
versions:
version: 0, lessThan: 2.2.4, status: affected, versionType: semver
programRoutines:
name: decoder.unmarshal
name: yaml_parser_increase_flow_level
name: yaml_parser_roll_indent
name: Decoder.Decode
name: Unmarshal
name: UnmarshalStrict
defaultStatus: unaffected
}