dgraph-io / ristretto

A high performance memory-bound Go cache

Home Page:https://dgraph.io/blog/post/introducing-ristretto-high-perf-go-cache/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

gopkg.in/yaml.v2 Denial of Service (DoS)

jeffotoni opened this issue · comments

People found a dependency with a vulnerability
github.com/dgraph-io/ristretto@v0.0.3
Fixed in
gopkg.in/yaml.v2@2.2.8
Exploit maturity
NO KNOWN EXPLOIT


gopkg.in/yaml.v2 Denial of Service (DoS)
VULNERABILITY
CWE-1050
CVE-2019-11254

Use Discuss Issues for reporting issues about this repository.