CVE-2017-18640

HIGH · CVSS 7.5 EPSS 26.72%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-12 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-18640

Severity

HIGH

CVSS

7.5

EPSS

26.72%

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.