CVE-2024-45338
CVE Details
Visit the official vulnerability details page for CVE-2024-45338 to learn more.
Initial Publication
12/18/2024
Last Update
06/17/2026
Third Party Dependency
yq-go
NIST CVE Summary
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Deferred
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.4.3 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.