CVE:CVE-2022-25857
CNNVD:CNNVD-202208-4428
SnakeYAML是一款基于Java的YAML解析器。
SnakeYAML 1.31及之前版本存在安全漏洞，该漏洞源于缺少对集合的嵌套深度限制，存在拒绝服务（DoS）问题。
solution:Upgrade snakeyaml_project snakeyaml to a higher version than 1.31,and avoid the version (,1.31); Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0