←back to thread

Helm local code execution via a malicious chart

(github.com)
171 points irke882 | 2 comments | 09 Jul 25 05:49 UTC | HN request time: 0.423s | source
Show context
sugarpimpdorsey ◴[09 Jul 25 06:59 UTC] No.44507048[source]▶
If we're being honest, YAML is one of the dumbest ideas of the last 20 years to have proliferated. How we got from XML to here I cannot comprehend.

This is not the first RCE involving YAML and it won't be the last.

replies(8): >>44507063 #>>44507118 #>>44507128 #>>44507156 #>>44507406 #>>44507812 #>>44507872 #>>44509145 #
1. fmbb ◴[09 Jul 25 07:14 UTC] No.44507118[source]▶
A search for XML on cve.org gives

> Showing 1 - 25 of 6,749 results for XML

Searching for YAML:

> Showing 1 - 25 of 288 results for YAML

replies(1): >>44507124 #
2. baq ◴[09 Jul 25 07:15 UTC] No.44507124[source]▶
Is that from the past two years?