Linux Distros Unpatched Vulnerability : CVE-2025-64718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a...

CVE-2025-64718: Improperly Controlled Modification of Object Prototype Attributes

js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...

USN-7844-1 libyaml-syck-perl vulnerability

It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information...

Important: perl-YAML-Syck

Issue Overview: YAML::Syck versions before 1.36 for Perl has missing null-terminators which causes out-of-bounds read and potential information disclosure Missing null terminators in token.c leads to but-of-bounds read which allows adjacent variable to be read The issue is seen with complex YAML...

EUVD-2025-21562

Malicious code in bioql PyPI...

EUVD-2022-2886

Malicious code in bioql PyPI...

EUVD-2022-5503

Malicious code in bioql PyPI...

EUVD-2022-2639

Malicious code in bioql PyPI...

EUVD-2022-3438

Malicious code in bioql PyPI...

EUVD-2022-5028

Malicious code in bioql PyPI...

EUVD-2022-3072

Malicious code in bioql PyPI...

EUVD-2022-6974

Malicious code in bioql PyPI...

EUVD-2022-2078

Malicious code in bioql PyPI...

EUVD-2022-2386

Malicious code in bioql PyPI...

EUVD-2022-5561

Malicious code in bioql PyPI...

EUVD-2022-1914

Malicious code in bioql PyPI...

EUVD-2022-0617

Malicious code in bioql PyPI...

EUVD-2022-1138

Malicious code in bioql PyPI...

EUVD-2022-3481

Malicious code in bioql PyPI...

RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained

Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...