288 matches found
EUVD-2022-2639
Malicious code in bioql PyPI...
EUVD-2022-3438
Malicious code in bioql PyPI...
EUVD-2022-3072
Malicious code in bioql PyPI...
EUVD-2022-6974
Malicious code in bioql PyPI...
EUVD-2022-5028
Malicious code in bioql PyPI...
EUVD-2022-5561
Malicious code in bioql PyPI...
EUVD-2022-2386
Malicious code in bioql PyPI...
EUVD-2022-1138
Malicious code in bioql PyPI...
EUVD-2022-3481
Malicious code in bioql PyPI...
EUVD-2022-1914
Malicious code in bioql PyPI...
EUVD-2022-2078
Malicious code in bioql PyPI...
EUVD-2022-0617
Malicious code in bioql PyPI...
RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained
Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...
Linux Distros Unpatched Vulnerability : CVE-2018-20573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Scanner::EnsureTokensInQueue function in yaml-cpp aka LibYaml-C++ 0.6.2 allows remote attackers to cause a denial of service stack consumption and applicati...
CVE-2025-49830
Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) are affected by CVE-2025-49830 due to a policy YAML parser that can reference server files, enabling information disclosure. Affected versions: Secrets Manager, Self-Hosted prior to 13.5.1 and 13.6.1; Conjur OSS prior to 1.2...
PT-2025-29672 · Cyberark · Conjur Oss +1
Name of the Vulnerable Software and Affected Versions: Conjur Secrets Manager, Self-Hosted versions prior to 13.5.1 and 13.6.1 Conjur OSS versions prior to 1.22.1 Description: Conjur provides secrets management and application identity for infrastructure. An authenticated attacker who is able to...
CVE-2022-41237
Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability...
CVE-2021-46364
A vulnerability in the Snake YAML parser of Magnolia CMS v6.2.3 and below allows attackers to execute arbitrary code via a crafted YAML file...
CVE-2020-1964
It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities CWE-502: Deserialization of Untrusted Data...