4609 matches found
EUVD-2025-176482
Malicious code in scripts-yaml-janus-gacrux npm...
JS-YAML 安全漏洞
JS-YAML is a JavaScript YAML parser and dump from Nodeca Open Source. A security vulnerability exists in JS-YAML version 4.1.0 and earlier, which stems from the possibility of modifying prototypes when parsing YAML documents, potentially leading to prototype contamination...
PT-2025-46851
Name of the Vulnerable Software and Affected Versions js-yaml versions prior to 4.1.1 Description js-yaml is a JavaScript YAML parser and dumper. A flaw exists where an attacker can alter the prototype of a parsed YAML document, leading to prototype pollution. This impacts users parsing untrusted...
Linux Distros Unpatched Vulnerability : CVE-2025-64718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the result of a...
Mageia: Security Advisory (MGASA-2025-0275)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated perl-YAML-LibYAML packages fix security vulnerability
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified. CVE-2025-40908...
MGASA-2025-0275 Updated perl-YAML-LibYAML packages fix security vulnerability
YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified. CVE-2025-40908...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.5 Vulnerability Details CVEID:CVE-2020-36732 DESCRIPTION: The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more...
EUVD-2025-116855
Malicious code in aether-yaml-xo-xo npm...
EUVD-2025-124393
Malicious code in node-sass-bellatrix-commitizen-yaml npm...
EUVD-2025-122923
Malicious code in quito-ophiuchus-jabbah-yaml npm...
EUVD-2025-123105
Malicious code in publish-stream-radiant-yaml npm...
EUVD-2025-120363
Malicious code in wolf-yaml-morgan-cross-env npm...
EUVD-2025-120148
Malicious code in yaml-arcturus-postgres-jabbah npm...
EUVD-2025-121099
Malicious code in triton-taurus-callisto-yaml npm...
EUVD-2025-120128
Malicious code in yaml-publish-dependencies-eslint-plugin npm...
EUVD-2025-120132
Malicious code in yaml-ophiuchus-hyperion-style-loader npm...
EUVD-2025-111755
Malicious code in levels-npm-yaml-xanadu npm...