Tag

yaml-parser-java

Safeguard articles tagged "yaml-parser-java" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

YAML Parsers in Java: SnakeYAML Deserialization Risks Explained

Choosing a YAML parser in Java means choosing a deserialization posture. How SnakeYAML's CVE-2022-1471 worked, what changed in 2.0, and how to parse YAML safely.

Mar 6, 20257 min read