Approved changes feed: RSS · Atom

cpe:2.3:a:vmware:cloudfoundry_manifest_yml_support:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVmware (7bb62c7c-2241-5a0b-8dbc-5f13251fb24e)
ProductCloudfoundry Manifest Yml Support (d9d7425f-b78c-5957-9527-e047c3469fe7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31691 vulnerable 2026-06-08 05:44:41.237879 Details available
Spring Tools 4 for Eclipse version 4.16.0 and below as well as VSCode extensions such as Spring Boot Tools, Concourse CI Pipeline Editor, Bosh Editor and Cloudfoundry Manifest YML Support version 1.39.0 and below all use Snakeyaml library for YAML editing support. This library allows for some special syntax in the YAML that under certain circumstances allows for potentially harmful remote code execution by the attacker.
Published: 2022-11-04T00:00:00.000Z
Updated: 2025-05-02T19:00:39.593Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.