Go-Yaml · Go-Yaml · CVE-2022-28948
**Name of the Vulnerable Software and Affected Versions**
Go-Yaml version v3
**Description**
An issue in the Unmarshal function causes the program to crash or panic when attempting to deserialize invalid input.
**Recommendations**
For Go-Yaml version v3, consider validating input data before attempting to deserialize it to prevent the program from crashing or panicking. As a temporary workaround, consider adding error handling to the Unmarshal function to manage invalid input gracefully. At the moment, there is no information about a newer version that contains a fix for this vulnerability.