SecAlerts
CVE ListPricingSign Up
y

yaml project

Security Risk Profile

41
/100
medium

Security Risk Score

Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from May 19, 2022 to present

4
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
41/100
medium

Severity Distribution

Critical
0
High
3
Medium
1
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
0

Age Distribution

Common Weaknesses (CWE)

No CWE data available

Most Affected Products

1. ubuntu/golang-yaml.v28
2. Yaml Project Yaml Go3
3. IBM Data Virtualization on Cloud Pak for Data3
4. IBM Watson Query on Cloud Pak for Data3
5. debian/golang-yaml.v22

Recent Vulnerabilities

See more →
CVE-2023-2251
CVSS 7.5high

Uncaught Exception in eemeli/yaml

Apr 24, 2023
CVE-2021-4235
CVSS 5.5medium

Denial of service in gopkg.in/yaml.v2

Dec 27, 2022
CVE-2022-3064
CVSS 7.5high

Excessive resource consumption in gopkg.in/yaml.v2

Aug 29, 2022
CVE-2022-28948
CVSS 7.5high
May 19, 2022

Monitor yaml project in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

Start Free TrialBook a Demo
AboutNewsDocumentationTermsContact

© 2026 SecAlerts Pty Ltd. All rights reserved.

yaml project Security Vulnerabilities & Risk Score | 4 CVEs | SecAlerts - SecAlerts