Skip to content
Threat Feed
Subscribe

Product

Microsoft.OpenApi.YamlReader (2.0.0-Preview.11 to < 2.12.0, 3.0.0 to < 3.10.0)

1 brief RSS
high threat

Uncontrolled Resource Consumption in Microsoft.OpenApi Libraries

The Microsoft.OpenApi.YamlReader and Microsoft.OpenApi.Readers libraries are susceptible to a billion laughs denial-of-service attack, where crafted YAML files with nested anchors cause memory exhaustion and process termination during conversion.

exploited Microsoft.OpenApi.YamlReader +1
1c