4615 matches found
xss.yaml
It is an offensive tool for web application security testing. Th...
weblogic-monitoring-exporter
This is a Java-based project for exporting metrics from WebLogic Server WLS instances to Prometheus. The project is available in two forms: a web application and a separate process. The web application is deployed to the server from which metrics are to be extracted, while the separate process is...
CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2
CVE-2025-40908 affecting package perl-YAML-LibYAML for versions less than 0.902.0-2. An upgraded version of the package is available that resolves this issue...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +103 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.12)
serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HHW4-XG65-FP2X...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +104 more potentially affected by unknown CVE via libyml (>=0.0.1, <=0.0.5)
libyml CARGO version =0.0.1, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0067...
`libyml::string::yaml_string_extend` is unsound and unmaintained
In version 0.0.4, libyml::string::yamlstringextend was revised resulting in undefined behaviour, which is unsound. The GitHub project for libyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommende...
better-config-loader (>=0.1.4, <=0.2.4), blazen (>=0.1.93, <=0.1.151) +103 more potentially affected by unknown CVE via serde_yml (>=0.0.7, <=0.0.13)
serdeyml CARGO version =0.0.7, =0.1.4, =0.1.93, =0.1.131, =0.2.0, =0.33.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.14.0, =0.14.0, =0.3.0, =0.4.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0068...
RUSTSEC-2025-0068 serde_yml crate is unsound and unmaintained
Using serdeyml::ser::Serializer.emitter can cause a segmentation fault, which is unsound. The GitHub project for serdeyml was archived after unsoundness issues were raised. If you rely on this crate, it is highly recommended switching to a maintained alternative. Recommended alternatives -...
vulnerable-python-poc-exploit
Отчет по анализу уязвимостей Python приложения vulnerable...
SUSE: Security Advisory (SUSE-SU-2025:02814-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 41 Update: yq-4.47.1-2.fc41
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
[SECURITY] Fedora 42 Update: yq-4.47.1-2.fc42
Yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor...
Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm)
The package yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin was found to contain malicious code...
MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...
MAL-2025-46754 Malicious code in yaml-transform-rollup-plugin-dione (npm)
The package yaml-transform-rollup-plugin-dione was found to contain malicious code...
Malicious code in quantum-regulus-concurrently-yaml (npm)
The package quantum-regulus-concurrently-yaml was found to contain malicious code...
Malicious code in zero-authorize-compile-yaml-process (npm)
The package zero-authorize-compile-yaml-process was found to contain malicious code...
Malicious code in yaml-assert-upsilon-sudo-small (npm)
The package yaml-assert-upsilon-sudo-small was found to contain malicious code...