CVE-2023-2251: 
JavaScript vulnerability analysis and mitigation

An uncaught exception vulnerability was identified in the GitHub repository eemeli/yaml, affecting versions prior to 2.0.0-5. The vulnerability was disclosed on April 24, 2023, and was assigned CVE-2023-2251. This security issue affects the YAML parsing library used in various software implementations (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-248 (Uncaught Exception) and can be exploited remotely with low attack complexity, requiring no privileges or user interaction (NVD).

The vulnerability primarily affects the availability of systems using the vulnerable versions of the YAML library. With a CVSS score indicating high availability impact but no impact on confidentiality or integrity, the vulnerability could potentially lead to service disruptions through uncaught exceptions (Ubuntu).

The vulnerability has been fixed in version 2.2.2 of the eemeli/yaml library. Users are advised to upgrade to this version or later to mitigate the vulnerability. The fix addresses the corner case failure in the error pretty-printer functionality (GitHub Patch).