MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)

The package yaml-assert-upsilon-sudo-small was found to contain malicious code...

Malicious code in zero-authorize-compile-yaml-process (npm)

The package zero-authorize-compile-yaml-process was found to contain malicious code...

Malicious code in yaml-assert-upsilon-sudo-small (npm)

The package yaml-assert-upsilon-sudo-small was found to contain malicious code...

Malicious code in quantum-regulus-concurrently-yaml (npm)

The package quantum-regulus-concurrently-yaml was found to contain malicious code...

MAL-2025-46878 Malicious code in zero-authorize-compile-yaml-process (npm)

The package zero-authorize-compile-yaml-process was found to contain malicious code...

Malicious code in yaml-transform-rollup-plugin-dione (npm)

The package yaml-transform-rollup-plugin-dione was found to contain malicious code...

MAL-2025-45717 Malicious code in quantum-regulus-concurrently-yaml (npm)

The package quantum-regulus-concurrently-yaml was found to contain malicious code...

Malicious code in lynx-electron-accretion-yaml (npm)

The package lynx-electron-accretion-yaml was found to contain malicious code...

MAL-2025-45085 Malicious code in lynx-electron-accretion-yaml (npm)

The package lynx-electron-accretion-yaml was found to contain malicious code...

MAL-2025-46753 Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)

The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...

SUSE-RU-2025:03081-1 Recommended update for perl-YAML-LibYAML

This update for perl-YAML-LibYAML fixes the following issues: - Updated to 0.904.0 - Dependency submission for the openQA stack...

SUSE SLES15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2025:02814-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02814-2 advisory. - CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905 Tenable has extracted the preceding description block directl...

PT-2025-36676

This update for perl-YAML-LibYAML fixes the following issues: - Updated to 0.904.0 - Dependency submission for the openQA stack...

Security update for ruby2.5

This update for ruby2.5 fixes the following issues: CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2025:02814-2 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2024-35221: Fixed remote denial of service via YAML manifest bsc1225905...

Helm May Panic Due To Incorrect YAML Content

...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the podman kube play command. An attacker can cause sensitive data corruption and system crashes by supplying a malicious Kubernetes YAML file that results in overwriting critical host files. The attacker only...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the podman kube play command. An attacker can cause sensitive data corruption and system crashes by supplying a malicious Kubernetes YAML file that results in overwriting critical host files. The attacker only...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the podman kube play command. An attacker can cause sensitive data corruption and system crashes by supplying a malicious Kubernetes YAML file that results in overwriting critical host files. The attacker only...

Linux Distros Unpatched Vulnerability : CVE-2018-20993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization. CVE-2018-20993 Note that Nessus...