FlawAtlas
Search the atlas
CVE-2022-3064 High

Excessive resource consumption in gopkg.in/yaml.v2

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

Exploit probability 1.7%
Published December 27, 2022
Required by Not available
Last source change August 12, 2026

02 / AFFECTED SOFTWARE

Affected packages

Unknown Unknown

7 explicit affected versions

Go gopkg.in/yaml.v2
Go gopkg.in/yaml.v2

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2022-3064

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

View original source
Open Source Vulnerabilities GO-2022-0956

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory.

View original source
Open Source Vulnerabilities GHSA-6q6q-88xp-6f2r

Parsing malicious or large YAML documents can consume excessive amounts of CPU or memory

View original source

05 / REFERENCES

Further evidence