CVE-2026-120455

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

CVE-2026-120455

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

CVE-2026-120455

The rapidyaml library, in versions up to and including 0.16.0 , is vulnerable to an out-of-bounds write in the ParseEngine::_add_annotation() function. The root cause is a fixed two-element annotation array in release builds that can be overflowed when processing YAML containing consecutive ancho...

EUVD-2026-115215

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

CVE-2026-120455 rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

CVE-2026-120455 rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

CVE-2026-120455 rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

PT-2026-135471

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine:: add annotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation arr...

CVE-2026-120455: biojppm rapidyaml: rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows…

rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::addannotation that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to a missing maximum tree depth check in emitter functions. Remediation Upgrade rapidyaml to version 0.7.0 or higher. References - GitHub Commit - GitHub PR...