Web Hack List

Preliminary research

YAML Merge Tags and Parser Differentials

AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Constructs a single YAML document whose merge keys and explicit merge tags resolve to different values in Go, Ruby, Node.js and Python parsers. The work provides compact test cases for studying security decisions made across inconsistent YAML implementations.

Record

Published by
The DarkForge Labs Blog

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of The DarkForge Labs Blog, first published at the original source. Preserved copies are kept so the citation survives its host.