SUSE CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

SUSE-SU-2026:20949-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

SUSE-SU-2026:20976-1 Security update for docker-compose

This update for docker-compose fixes the following issues: - CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in response to a key listing or signing request bsc1253584. - CVE-2025-47914: golang.org/x/crypto/ssh/agent: non validat...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, scorecard, kaniko, docker-compose, osv-scanner, buildah, docker-cli-buildx, podman, kubescape, trivy, guac, conftest, skaffold...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, scorecard, kaniko, docker-compose, osv-scanner, buildah, docker-cli-buildx, podman, kubescape, trivy, guac, conftest, skaffold...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, scorecard, kaniko, docker-compose, osv-scanner, buildah, docker-cli-buildx, podman, kubescape, trivy, guac, conftest, skaffold...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, scorecard, kaniko, docker-compose, osv-scanner, buildah, docker-cli-buildx, podman, kubescape, trivy, guac, conftest, skaffold...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, docker-compose, skaffold-fips, buildah-fips, trivy-fips, cloudbeat-fips, conftest, docker-cli-buildx-fips, buildah, cloudbeat, docker-compose-fips, kubescape, guac, conftest-fips, kubescape-server-fips, osv-scanner, skaffold, kubescape-server,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, docker-compose, skaffold-fips, buildah-fips, trivy-fips, cloudbeat-fips, conftest, docker-cli-buildx-fips, buildah, cloudbeat, docker-compose-fips, kubescape, guac, conftest-fips, kubescape-server-fips, osv-scanner, skaffold, kubescape-server,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, docker-compose, skaffold-fips, buildah-fips, trivy-fips, cloudbeat-fips, conftest, docker-cli-buildx-fips, buildah, cloudbeat, docker-compose-fips, kubescape, guac, conftest-fips, kubescape-server-fips, osv-scanner, skaffold, kubescape-server,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: trivy-operator, zot, docker-compose, skaffold-fips, buildah-fips, trivy-fips, cloudbeat-fips, conftest, docker-cli-buildx-fips, buildah, cloudbeat, docker-compose-fips, kubescape, guac, conftest-fips, kubescape-server-fips, osv-scanner, skaffold, kubescape-server,...

DEBIAN-CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

UBUNTU-CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

Summary: CVE-2026-33532 affects the yaml JavaScript library. The vulnerability is in the compose/resolve phase of the parser, where a recursive call path without a depth bound can cause a RangeError: Maximum call stack size exceeded when parsing YAML input (typical payload ~2–10 KB). This can lea...

CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections

yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function calls without a...

SUSE-SU-2026:20871-1 Security update for docker-compose

This update for docker-compose fixes the following issue: - CVE-2025-62725: OCI compose artifacts can be used to escape the cache directory and overwrite arbitrary files bsc1252752...

MAL-2026-2145 Malicious code in compose-rl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d7bb3250324aea46c0121883650a393aeee3569ba3a3a8f202530bdc523a5735 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...