HIGHCWE-776
PARSE-002 YAML Anchor Alias Abuse
Parser Differential: Exploits differences in how parsers (JSON, YAML, markdown) interpret the same input to bypass security controls
Description
Uses YAML anchors and aliases to create self-referencing structures that expand exponentially (billion laughs) or inject hidden values
Remediation
Disable YAML anchors and aliases in untrusted input. Use safe YAML loaders (yaml.safe_load). Set maximum document size and nesting depth limits.