Skip to content

Vendor

io.prometheus.jmx vulnerabilities

1 published CVE affecting io.prometheus.jmx, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of io.prometheus.jmx alerts

Products

Latest io.prometheus.jmx CVEs

Newest publication first

  1. CVE-2022-38749 DoS in SnakeYAML

    Published
    MediumCVSS 6.5 EPSS 2.2%

    Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.