Launchpad.net

CVE 2017-18640

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

See the CVE page on Mitre.org for more details.

References