CVE-2020-8441
CRITICALJYaml <1.3 - Code Injection
Title source: llmDescription
JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.
Scores
CVSS v3
9.8
EPSS
0.0758
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-502
Status
published
Affected Products (2)
jyaml_project/jyaml
< 1.3
org.jyaml/jyaml
Maven
Timeline
Published
Feb 19, 2020
Tracked Since
Feb 18, 2026