Skip to content
Log inStart free trial

gopkg.in/yaml.v3 (Go)

Advisories
3
Latest version
v3.0.1
Released May 27, 2022
License
MIT, Apache-2.0
OpenSSF Scorecard
—

How to fix

Upgrading to 3.0.1 or later clears every advisory below that has a fix.

Upgrade commands
go
go get gopkg.in/yaml.v3@v3.0.1 && go mod tidy

Known vulnerabilities

AdvisorySeverityAffectedFixed in
GHSA-hp87-p4gw-j4gq
gopkg.in/yaml.v3 Denial of Service
 High
EPSS 3.96%
< 3.0.1
3.0.1
GHSA-hp87-p4gw-j4gq
gopkg.in/yaml.v3 Denial of Service
 High
EPSS 3.96%
< 3.0.1
3.0.1
GHSA-hp87-p4gw-j4gq
gopkg.in/yaml.v3 Denial of Service
 High
EPSS 3.96%
< 3.0.0-20220521103104-8f96da9f5d5e
3.0.0-20220521103104-8f96da9f5d5e

Source: https://gopkg.in/yaml.v3

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor