4609 matches found
02.aula (1.0.0), 0xrtest (1.0.0) +10657 more potentially affected by unknown CVE via js-yaml (>=4.0.0, <=4.3.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21410 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...
02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +21410 more potentially affected by unknown CVE via js-yaml (>=3.0.0, <=3.15.0)
js-yaml NPM version =3.0.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =2.0.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5P4M-2WFM-XMQJ...
02.aula (1.0.0), 0xrtest (1.0.0) +10657 more potentially affected by unknown CVE via js-yaml (>=4.0.0, <=4.3.0)
js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.14.0 and more Source cves: unknown CVE Source advisory: SNYK:JS-JSYAML-18593780...
GHSA-5P4M-2WFM-XMQJ JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
Quadratic CPU consumption in !!omap resolution js-yaml 3.x and 4.x Summary resolveYamlOmap enforces key uniqueness for !!omap sequences with a linear scan objectKeys.indexOf... inside the per-element loop, making resolution On² in the number of entries. A modestly sized YAML document therefore...
CVE-2026-66297
Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...
EEF-CVE-2026-66297 Unescaped deployment environment variables in generated setup commands
Summary Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: saf, prism, arangodb, opensearch-dashboards-fips, vitess, renovate, librechat, nextcloud-server, argo-workflows, yaml-language-server, gitlab-rails-ce, gemini-cli, langfuse, serve, unleash-proxy, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: saf, prism, arangodb, opensearch-dashboards-fips, vitess, renovate, librechat, nextcloud-server, argo-workflows, yaml-language-server, gitlab-rails-ce, gemini-cli, langfuse, serve, unleash-proxy, langfuse-fips, gitlab-rails-ce-fips, opensearch-dashboards...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, vitess, renovate, serve, prism, saf, yaml-language-server, langfuse, argo-workflows...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, vitess, renovate, serve, prism, saf, yaml-language-server, langfuse, argo-workflows...
CVE-2026-69098
kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the checkconnection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a type field. Attackers can exploit this to override the type field wi...
ROOT-APP-NPM-CVE-2026-33532 CVE-2026-33532 in yaml - Patched by Root
Root has patched CVE-2026-33532 in the yaml package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784683084 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.1-tuxcare.2...
CLSA-2026-1784682988 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.2-tuxcare.1...
CLSA-2026-1784596292 TuxCare security update for js-yaml (5 CVEs)
TuxCare rebuilt js-yaml to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784250517 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v3.4.47-p2+tuxcare...
CLSA-2026-1784077476 TuxCare security update for symfony/yaml (2 CVEs)
TuxCare rebuilt symfony/yaml to address 2 CVEs. Fixed in v4.4.45-p1+tuxcare...