Critical 9.8
CVE-2022-1471
SnakeYAML CVE-2022-1471 Content-Type Confusion Deserialization Vulnerability
Vendor / product: SnakeYAML
Event date: 2022-10-01
Public PoC: Yes
First tracked by RiskWire: 2026-09-05
Sources & citations (1)
- Content-Type Confusion in REST APIs: One Header Switch, Three Attack Surfaces dev.to · 2026-09-06
References
See CVE-2022-1471 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →