4551 matches found
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +103 more potentially affected by unknown CVE via libyml (>=0.0.1, <=0.0.5)
libyml CARGO version =0.0.1, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0067...
`libyml::string::yaml_string_extend` is unsound and unmaintained
In version 0.0.4, libyml::string::yamlstringextend was revised resulting in undefined behaviour, which is unsound. The GitHub project for libyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommende...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +102 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.13)
serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...
RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained
Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...
vulnerable-python-poc-exploit
Отчет по анализу уязвимостей Python приложения vulnerable...
SUSE: Security Advisory (SUSE-SU-2025:02814-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 41 Update: yq-4.47.1-2.fc41
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
[SECURITY] Fedora 42 Update: yq-4.47.1-2.fc42
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)
The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...
MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
MAL-2025-46754 Malicious code in yaml-transform-rollup-plugin-dione (npm)
The package yaml-transform-rollup-plugin-dione was found to contain malicious code...
Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
Malicious code in quantum-regulus-concurrently-yaml (npm)
The package quantum-regulus-concurrently-yaml was found to contain malicious code...
Malicious code in yaml-transform-rollup-plugin-dione (npm)
The package yaml-transform-rollup-plugin-dione was found to contain malicious code...
Malicious code in zero-authorize-compile-yaml-process (npm)
The package zero-authorize-compile-yaml-process was found to contain malicious code...
MAL-2025-45717 Malicious code in quantum-regulus-concurrently-yaml (npm)
The package quantum-regulus-concurrently-yaml was found to contain malicious code...
MAL-2025-46878 Malicious code in zero-authorize-compile-yaml-process (npm)
The package zero-authorize-compile-yaml-process was found to contain malicious code...
Malicious code in lynx-electron-accretion-yaml (npm)
The package lynx-electron-accretion-yaml was found to contain malicious code...