Unrated severityOSV Advisory· Published Dec 8, 2025· Updated Dec 11, 2025
CVE-2025-63721
CVE-2025-63721
Description
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
Affected products
1- Range: v0.1.0, v0.1.1, v0.1.2, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.