Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.22.19 security and extras update

Red Hat OpenShift Container Platform release 4.22.19 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.43 security and extras update

Red Hat OpenShift Container Platform release 4.20.43 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a security impact of...

CLSA-2026-1792163387 TuxCare security update for js-yaml (1 CVE)

TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.15.1-tuxcare.1...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by an uncontrolled resource consumption due to js-yaml (CVE-2026-84375)

Summary There is a vulnerability in the js-yaml library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1,...

Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in js-yaml (CVE-2026-84375)

Summary IBM Db2 Developer Extension is affected by vulnerability in js-yaml CVE-2026-84375 Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.j...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.57 security and extras update

Red Hat OpenShift Container Platform release 4.18.57 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of...

CLEANSTART-2026-QF29635 js-yaml is a JavaScript YAML parser and dumper

CVE-2026-59869 affects multiple packages. js-yaml is a JavaScript YAML parser and dumper. See references for individual vulnerability details...

CLEANSTART-2026-JR75772 js-yaml is a JavaScript YAML parser and dumper

CVE-2026-84375 affects multiple packages. js-yaml is a JavaScript YAML parser and dumper. See references for individual vulnerability details...

CLEANSTART-2026-ZU44577 js-yaml is a JavaScript YAML parser and dumper

Security vulnerability affects the renovate package. js-yaml is a JavaScript YAML parser and dumper...

Security Bulletin: Multiple vulnerabilties in DevOps Test Hub

Summary Multiple vulnerabilities addressed in DevOps Test Hub in version 12.0.0 Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor...

CLEANSTART-2026-TB41046 js-yaml is a JavaScript YAML parser and dumper

Security vulnerability affects the n8n package. js-yaml is a JavaScript YAML parser and dumper...

PT-2026-117861

Security vulnerability affects the n8n package. js-yaml is a JavaScript YAML parser and dumper...

Security Bulletin: Security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak

Summary A security vulnerability in JavaScript affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. JavaScript is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak as part of its deployment. This bulletin identifies the fix...

ROOT-APP-NPM-AIKIDO-2026-633502 AIKIDO-2026-633502 in js-yaml - Patched by Root

Root has patched AIKIDO-2026-633502 in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-641142 AIKIDO-2026-641142 in js-yaml - Patched by Root

Root has patched AIKIDO-2026-641142 in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-5P4M-2WFM-XMQJ GHSA-5p4m-2wfm-xmqj in js-yaml - Patched by Root

Root has patched GHSA-5p4m-2wfm-xmqj in the js-yaml package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-84375 CVE-2026-84375 in js-yaml - Patched by Root

Root has patched CVE-2026-84375 in the js-yaml package for Root:npm. Multiple fixed versions available...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (September 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-59869 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From...

Security Bulletin:Prototype Pollution Vulnerability in js-yaml Before 4.1.1 and 3.14.2

Summary js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is...

Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in js-yaml. CVE-2026-84375 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-84375 DESCRIPTION: js-yaml is a JavaScript YAML parser and dumper. From 3.0.0...