Webkul Krayin CRM 代码注入漏洞

Webkul Krayin CRM is a free and open-source CRM solution for small and medium-sized businesses from the Indian company Webkul. Versions of Webkul Krayin CRM 2.2 and earlier contained a code injection vulnerability. This vulnerability stemmed from an error in the composeMail function of the...

SUSE CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

SUSE-SU-2026:20949-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

SUSE-SU-2026:20976-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: scorecard, trivy, docker-cli-buildx, zot, kubescape, guac, podman, docker-compose, osv-scanner, skaffold, buildah, kaniko, trivy-operator, conftest...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: scorecard, trivy, docker-cli-buildx, zot, kubescape, guac, podman, docker-compose, osv-scanner, skaffold, buildah, kaniko, trivy-operator, conftest...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: scorecard, trivy, docker-cli-buildx, zot, kubescape, guac, podman, docker-compose, osv-scanner, skaffold, buildah, kaniko, trivy-operator, conftest...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: scorecard, trivy, docker-cli-buildx, zot, kubescape, guac, podman, docker-compose, osv-scanner, skaffold, buildah, kaniko, trivy-operator, conftest...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose-fips, skaffold-fips, guac, buildah, trivy, trivy-operator-fips, scorecard, livekit-cli, docker-fips, trivy-operator, conftest, kaniko, podman-fips, zot, kubescape, trivy-fips, kaniko-fips, cloudbeat-fips, docker-compose, skaffold,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose-fips, skaffold-fips, guac, buildah, trivy, trivy-operator-fips, scorecard, livekit-cli, docker-fips, trivy-operator, conftest, kaniko, podman-fips, zot, kubescape, trivy-fips, kaniko-fips, cloudbeat-fips, docker-compose, skaffold,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose-fips, skaffold-fips, guac, buildah, trivy, trivy-operator-fips, scorecard, livekit-cli, docker-fips, trivy-operator, conftest, kaniko, podman-fips, zot, kubescape, trivy-fips, kaniko-fips, cloudbeat-fips, docker-compose, skaffold,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose-fips, skaffold-fips, guac, buildah, trivy, trivy-operator-fips, scorecard, livekit-cli, docker-fips, trivy-operator, conftest, kaniko, podman-fips, zot, kubescape, trivy-fips, kaniko-fips, cloudbeat-fips, docker-compose, skaffold,...

DEBIAN-CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

UBUNTU-CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

Summary: CVE-2026-33532 affects the yaml JavaScript library. The vulnerability is in the compose/resolve phase of the parser, where a recursive call path without a depth bound can cause a RangeError: Maximum call stack size exceeded when parsing YAML input (typical payload ~2–10 KB). This can lea...

CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

SUSE-SU-2026:20871-1 Security update for docker-compose

This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files bsc1252752...