See how libfyaml compares to other vendors in security performance
libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat(). When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca() inside a loop. The allocated stack memory is not released until the function returns, causing cumulative stack growth that can exceed the process stack limit and result in SIGSEGV and denial of service.