4630 matches found
GHSA-5GJX-96WQ-C8R2 vulnerabilities
Vulnerabilities for packages: helm...
GO-2026-4603 vulnerabilities
Vulnerabilities for packages: verticadb-operator-fips, k6-fips, cadvisor, azcopy-fips, falco-no-driver, crossplane-provider-aws-kms, kubescape-operator-fips, restic-fips, octo-sts, coredns-fips, docker-compose, crossplane-function-auto-ready-fips, flannel-fips, etcd, jaeger-fips, pgwatch,...
GO-2024-3321 vulnerabilities
Vulnerabilities for packages: docker-credential-acr-env-fips, cadvisor, azcopy-fips, opentelemetry-collector-fips, consul-k8s, crossplane-provider-aws-kms, temporal-ui-server, restic-fips, octo-sts, dagger, docker-compose, fulcio, slsa-verifier, tailscale, etcd, openbao, gcsfuse,...
GO-2023-1849 vulnerabilities
Vulnerabilities for packages: k3d...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, chezmoi, gitea, grype, kaniko, pulumi, wolfictl, goreleaser, k9s, pulumi-language-dotnet, grafana-alloy, zot, osv-scanner, pulumi-language-yaml, timoni, kubevela, zarf, kots, scorecard, nuclei, gitsign, flux, pulumi-language-java,...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, chezmoi, gitea, grype, kaniko, pulumi, wolfictl, goreleaser, k9s, pulumi-language-dotnet, grafana-alloy, zot, osv-scanner, pulumi-language-yaml, timoni, kubevela, zarf, kots, scorecard, nuclei, gitsign, flux, pulumi-language-java,...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: pulumi-kubernetes-operator, chezmoi, gitea, grype, kaniko, pulumi, wolfictl, cerbos, witness, k9s, pulumi-language-dotnet, grafana-alloy, zot, gomplate, osv-scanner, pulumi-language-yaml, rancher-fleet, kubevela, gitlab-runner, zarf, kots, scorecard, nuclei,...
GO-2026-5013 vulnerabilities
Vulnerabilities for packages: gitea, mattermost, wolfictl, cloudflared, gh, prometheus, crossplane-provider-aws-ec2, step-issuer, crossplane-provider-azure-storage, kaf, spire-server, rancher-agent, teleport, crossplane-provider-aws-dynamodb, atlantis, neuvector-sigstore-interface, kyverno, cosig...
Linux Distros Unpatched Vulnerability : CVE-2026-73643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load o...
CVE-2026-73643
creationtimestamp| type| source ---|---|--- 2026-08-13 18:35:08+00:00| published-proof-of-concept| https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5...
CVE-2026-73643
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
UBUNTU-CVE-2026-73643
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
CVE-2026-73643
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
EUVD-2026-58185
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
CVE-2026-73643 js-yaml: Exponential parsing time in the flow collections leads to denial of service
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
CVE-2026-73643
js-yaml versions 5.0.0–5.2.2 expose a denial-of-service via exponential parsing time when loading untrusted YAML. In src/parser/parser.ts, readFlowCollection can double-parse nested flow sequences, causing O(2^n) work and potential CPU exhaustion for inputs under 200 bytes. Fixed in version 5.2.2...
CVE-2026-73643 js-yaml: Exponential parsing time in the flow collections leads to denial of service
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
CVE-2026-73643
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential time when an application calls load or loadAll on untrusted input. In src/parser/parser.ts, readFlowCollection uses restoreState and calls parseNode a second time when a...
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
A flaw was found in Apache Commons Configuration. When processing an untrusted configuration file, a remote attacker could provide specially crafted YAML input with cycles. This could lead to an uncontrolled recursion, causing a StackOverflowError and resulting in a Denial of Service DoS for the...