Date: 2025-02-17
SnakeYAML versions prior to 2.0 suffered from a critical vulnerability (CVE-2022-1471) allowing remote code execution via unsafe YAML deserialization. This flaw enabled attackers to execute arbitrary Java code by crafting malicious ...