Threats tagged 'ghsa-pj6m-mgp5-m3qx'

rapidyaml versions through 0.16.0 have an out-of-bounds write vulnerability in the ParseEngine::_add_annotation() function. This flaw allows attackers to corrupt memory by providing YAML input with excessive anchors or tags, which overflow a fixed-size annotation array. The overflow can corrupt stack memory and cause the process to crash.