Threats tagged 'ghsa-85r9-7wj5-x6x5'

A vulnerability in libmodulemd allows denial of service via stack exhaustion or excessive resource consumption when parsing deeply nested xmd YAML content. This occurs because the parser uses recursive YAML mapping and sequence helpers without limits on recursion depth or node count. Exploitation requires processing attacker-controlled modulemd YAML with deeply nested xmd structures. The flaw impacts availability only and does not affect confidentiality or integrity. Environments that only process trusted module metadata are not practically exposed. Mitigation involves avoiding untrusted input or limiting resource usage during parsing.