CVE-2021-4235

CVE-2021-4235 is a denial-of-service vulnerability affecting the yaml_project yaml library, stemming from unbounded alias chasing when parsing maliciously crafted YAML files. An attacker could exploit this by providing a specially designed YAML file, causing the system to consume excessive resources and become unavailable. The vulnerability has a CVSS score of 5.5 (Medium), indicating a low attack complexity requiring user interaction, but with high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.