7050 matches found
02.aula (1.0.0), 0xrtest (1.0.0) +8089 more potentially affected by CVE-2025-64718 via js-yaml (>=4.0.0, <=4.1.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 and more Source cves: CVE-2025-64718 Source advisory: SNYK:JS-JSYAML-13961110...
org.webjars.bowergithub.lostinbrittany:granite-yaml (1.1.0) potentially affected by CVE-2025-64718 via org.webjars.bowergithub.nodeca:js-yaml (3.14.1)
org.webjars.bowergithub.nodeca:js-yaml MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.bowergithub.nodeca:js-yaml and may be impacted: - org.webjars.bowergithub.lostinbrittany:granite-yaml 1.1.0 Source cves:...
Prototype Pollution
Overview org.webjars.bower:js-yaml is a human-friendly data serialization language. Affected versions of this package are vulnerable to Prototype Pollution via the merge function. An attacker can alter object prototypes by supplying specially crafted YAML documents containing proto properties. Th...
CVE-2025-64718
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
UBUNTU-CVE-2025-64718
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
CVE-2025-64718
CVE-2025-64718 affects js-yaml, allowing prototype pollution via proto when parsing untrusted YAML. The issue is patched in js-yaml 4.1.1 and in 3.14.2. Public IBM bulletins confirm usage of vulnerable js-yaml versions in IBM Maximo components and recommend upgrading to a fixed release (e.g., js-...
CVE-2025-64718 js-yaml has prototype pollution in merge (<<)
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
02.aula (1.0.0), 0xrtest (1.0.0) +8089 more potentially affected by CVE-2025-64718 via js-yaml (>=4.0.0, <=4.1.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 and more Source cves: CVE-2025-64718 Source advisory: MEND:CVE-2025-64718...
CVE-2025-64718
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution "proto". All users who parse untrusted yaml documents may be impacted. The problem is patched i...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +24634 more potentially affected by CVE-2025-64718 via js-yaml (>=0.3.5, <=3.14.1)
js-yaml NPM version =0.3.5, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2025-64718 Source advisory: MEND:CVE-2025-64718...
CVE-2025-64718 js-yaml has prototype pollution in merge (<<)
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
CVE-2025-64718
js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution proto. All users who parse untrusted yaml documents may be impacted. The problem is patched in...
EUVD-2025-180060
Malicious code in bioinformatics-proxima-uglify-js-rimraf npm...
EUVD-2025-178061
Malicious code in lithosphere-changelog-grunt-uglify-js npm...
EUVD-2025-178243
Malicious code in juno-uglify-js-tethys-thermochronology npm...
EUVD-2025-179790
Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...
EUVD-2025-177200
Malicious code in phoenix-apollo-nextjs-nova npm...
EUVD-2025-176953
Malicious code in proxima-uglify-js-biomimicry-quasar npm...