High severity7.5NVD Advisory· Published Nov 13, 2023· Updated Jun 17, 2026
CVE-2023-47163
CVE-2023-47163
Description
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service (DoS) condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
remarshalPyPI | < 0.17.1 | 0.17.1 |
Affected products
3cpe:2.3:a:remarshal_project:remarshal:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:remarshal_project:remarshal:*:*:*:*:*:*:*:*range: <0.17.1
- (no CPE)range: prior to v0.17.1
Patches
Vulnerability mechanics
References
7- github.com/remarshal-project/remarshal/commit/fd6ac799a02f533c3fc243b49cdd6d21aa7ee494nvdPatchWEB
- github.com/advisories/GHSA-gw7g-qr8w-3448ghsaADVISORY
- jvn.jp/en/jp/JVN86156389/nvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2023-47163ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/remarshal/PYSEC-2023-236.yamlghsaWEB
- github.com/remarshal-project/remarshal/releases/tag/v0.17.1nvdRelease NotesWEB
- jvn.jp/en/jp/JVN86156389ghsaWEB
News mentions
0No linked articles in our index yet.