PT-2026-60381

🗓️ 15 Jul 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 49 Views

WebSocket frame length header can overflow causing imprecise JavaScript numbers; upgrade to version 0.7.5 to reject long headers.

Reporter	Title	Published	Views	Family All 809
IBM Security Bulletins	Security Bulletin:Vulnerability in js-yaml affects IBM Netezza Appliance	12 Aug 202608:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Vite affects IBM Netezza Appliance	10 Aug 202612:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.	27 Aug 202619:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:11	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 Aug 202619:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules adm-zip and websocket-driver (CVE-2026-39244, CVE-2026-54466 and CVE-2026-54490)	7 Sep 202606:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869	10 Aug 202611:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses js-yaml-4.1.1.tgz which is vulnerable to CVE-2026-53550.	12 Aug 202614:13	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2026-27601
suse	www.suse.com/security/cve/CVE-2026-67319
osv	www.osv.dev/vulnerability/GHSA-xv26-6w52-cph6
osv	www.osv.dev/vulnerability/CVE-2026-54466
bugzilla	www.bugzilla.suse.com/1272310
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
suse	www.suse.com/security/cve/CVE-2026-40181
suse	www.suse.com/security/cve/CVE-2026-73650
bugzilla	www.bugzilla.suse.com/1246822
bugzilla	www.bugzilla.suse.com/1269595

04 Sep 2026 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 49.2

CVSS 3.15.3 - 7.5

EPSS0.00428

SSVC