YamlDotNet
YamlDotNet is a .NET library for YAML. YamlDotNet provides low level parsing and emitting of YAML as well as a high level object model similar to XmlDocument. A serialization library is also included that allows to read and write objects from and to YAML streams.
82%
Total Score
100
100
100
Health Score Breakdown
All five workflows were analyzed with no untrusted checkouts or script injections, and all ten action references are pinned. However, the audit found three high-confidence findings: two template-injection findings and one floating latest container image; these are workflow hygiene risks even without corroborating untrusted triggers.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-384258 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. YamlDotNet is vulnerable to Uncontrolled Recursion in versions 3.0.0 - 18.0.0. | 3.0.0 - 18.0.0 | Medium |
CVE-2018-1000210 YamlDotNet is vulnerable to Deserialization of Untrusted Data in versions 0.0.0 - 4.3.2. | 0.0.0 - 4.3.2 | High |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.