CVE-2017-18640

ADVISORY - github

Summary

The Alias feature in SnakeYAML 1.18 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

EPSS Score⁠: 0.02166 (0.839)

ADVISORY - nist

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

ADVISORY - github

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

ADVISORY - gitlab

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

Heap-based Buffer Overflow

Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.