ROOT-APP-MAVEN-CVE-2022-1471 CVE-2022-1471 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-1471 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available...

CVE-2026-80352

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

CVE-2026-80352

CVE-2026-80352 is a YAML injection vulnerability in Apache Camel K , specifically in the Master trait serviceAccountName field of custom resource configuration. An authorized CR author can inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges...

CVE-2026-80352 Apache Camel K: Camel K Master trait serviceAccountName YAML injection lets CR author apply arbitrary objects

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

EUVD-2026-75290

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

mitigate-copy-fail.yml

This repository does not have a README...

GravCMS_Nmap_Script

GravCMSNmapScript It is a nmap script for GravCMS vulnerability CVE-2021-21425 USAGE -- nmap -p443 --script gravcms.nse -- PORT STATE SERVICE -- 443/tcp open https -- | gravcms: -- | VULNERABLE: -- | GravCMS CVE-2021-21425 -- | State: VULNERABLE Exploitable -- | IDs: CVE:CVE-2021-21425 --...

docling-core-CVE-2026-24009

CVE-2026-24009 — docling-core Unsafe YAML Deserialization PoC + Notes This repo contains a proof-of-concept PoC and a simple scanner demonstrating CVE-2026-24009 , where docling-core can enable code execution when loading attacker-controlled YAML under specific dependency conditions. TL;DR Impact...

PT-2026-89302

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Camel K. A YAML injection vulnerability in custom resource configuration allows an authorized CR author to inject arbitrary Kubernetes objects, potentially enabling unauthorized resource creation with the privileges o...

GHSA-G72F-JW3W-MGH7 @openhop/server: Path Traversal in Flow ID File Operations

Path Traversal in Flow ID File Operations Summary @openhop/server passes unsanitized HTTP route parameters directly to path.join when constructing filesystem paths for flow YAML files. An unauthenticated attacker who can reach the server can read arbitrary .yaml files accessible to the OpenHop...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.18 Vulnerability Details CVEID:CVE-2026-45819 DESCRIPTION: baseline-browser-mapping 2.x before 2.11.0 calls process.exit instead of throwing on invalid or conflicting input parameters, and can trigger immediate process...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.46 security and extras update

Red Hat OpenShift Container Platform release 4.19.46 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

Nuclei-Template-CVE-2023-42793.yaml

Este repositorio no tiene un README...

EUVD-2026-69712

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources...

GHSA-2883-XCG3-V3HH js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

Summary maxTotalMergeKeys does not count empty mappings. An attacker can repeatedly merge a large sequence of them and consume significant CPU without reaching the configured limit. Example yaml arr: &arr , , , ... N empty mappings targets: - : arr repeated K times For every target, the loader...

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

Summary maxTotalMergeKeys does not count empty mappings. An attacker can repeatedly merge a large sequence of them and consume significant CPU without reaching the configured limit. Example yaml arr: &arr , , , ... N empty mappings targets: - : arr repeated K times For every target, the loader...

CVE-2026-72923

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

CVE-2026-72923

Microsoft.OpenApi.YamlReader (versions 2.0.0-preview.11 through 2.12.0 and 3.0.0 through 3.10.0) and Microsoft.OpenApi.Readers (prior to 1.6.30) are vulnerable to a denial of service via YAML alias expansion. The root cause lies in how SharpYaml represents aliases as shared nodes in a directed ac...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...

CVE-2026-72923 Microsoft.OpenApi.YamlReader/Readers vulnerable to denial of service via YAML alias expansion

In Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 until 2.12.0 and from 3.0.0 until 3.10.0, and in Microsoft.OpenApi.Readers prior to 1.6.30, a small YAML OpenAPI document containing nested anchors and aliases can cause uncontrolled resource consumption when parsed through the public YAML...