4429 matches found
OESA-2026-3239 perl-YAML security update
The YAML.pm module implements a YAML Loader and Dumper based on the YAML 1.0 specification. http://www.yaml.org/spec/ YAML is a generic data serialization language that is optimized for human readability.It can be used to express the data structures of most modern programming languages. Including...
OESA-2026-3238 perl-YAML security update
The YAML.pm module implements a YAML Loader and Dumper based on the YAML 1.0 specification. http://www.yaml.org/spec/ YAML is a generic data serialization language that is optimized for human readability.It can be used to express the data structures of most modern programming languages. Including...
OESA-2026-3237 perl-YAML security update
The YAML.pm module implements a YAML Loader and Dumper based on the YAML 1.0 specification. http://www.yaml.org/spec/ YAML is a generic data serialization language that is optimized for human readability.It can be used to express the data structures of most modern programming languages. Including...
GHSA-5P4M-2WFM-XMQJ JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
Quadratic CPU consumption in !!omap resolution js-yaml 3.x and 4.x Summary resolveYamlOmap enforces key uniqueness for !!omap sequences with a linear scan objectKeys.indexOf... inside the per-element loop, making resolution On² in the number of entries. A modestly sized YAML document therefore...
CVE-2026-66297
Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: renovate, opensearch-dashboards-fips, saf, argo-workflows, arangodb, langfuse-fips, langfuse, serve, opensearch-dashboards, prism, gitlab-rails-ce, vitess, unleash-proxy, librechat, gemini-cli, yaml-language-server, nextcloud-server...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: renovate, opensearch-dashboards-fips, saf, argo-workflows, arangodb, langfuse-fips, langfuse, serve, opensearch-dashboards, prism, gitlab-rails-ce, vitess, unleash-proxy, librechat, gemini-cli, yaml-language-server, nextcloud-server...
GHSA-7P8R-X3MC-P8W7 vulnerabilities
Vulnerabilities for packages: prism, saf, argo-workflows, vitess, serve, langfuse, yaml-language-server, renovate, opensearch-dashboards...
CVE-2026-18446 vulnerabilities
Vulnerabilities for packages: prism, saf, argo-workflows, vitess, serve, langfuse, yaml-language-server, renovate, opensearch-dashboards...
CVE-2026-69098
kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the checkconnection endpoint that allows unauthenticated attackers to instantiate arbitrary Python classes by supplying crafted YAML/JSON input with a type field. Attackers can exploit this to override the type field wi...
ROOT-APP-NPM-CVE-2026-33532 CVE-2026-33532 in yaml - Patched by Root
Root has patched CVE-2026-33532 in the yaml package for Root:npm. Multiple fixed versions available...
CLSA-2026-1784683084 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.1-tuxcare.2...
CLSA-2026-1784682988 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.2-tuxcare.1...
CLSA-2026-1784596292 TuxCare security update for js-yaml (5 CVEs)
TuxCare rebuilt js-yaml to address 5 CVEs. Fixed in 4.1.0-tuxcare.2...
CLSA-2026-1784250517 TuxCare security update for symfony/yaml (1 CVE)
TuxCare rebuilt symfony/yaml to address 1 CVE. Fixed in v3.4.47-p2+tuxcare...
CLSA-2026-1784077476 TuxCare security update for symfony/yaml (2 CVEs)
TuxCare rebuilt symfony/yaml to address 2 CVEs. Fixed in v4.4.45-p1+tuxcare...
CLSA-2026-1781484837 TuxCare security update for js-yaml (1 CVE)
TuxCare rebuilt js-yaml to address 1 CVE. Fixed in 3.14.1-tuxcare.1...
CLSA-2026-1778805968 TuxCare security update for js-yaml (3 CVEs)
TuxCare rebuilt js-yaml to address 3 CVEs. Fixed in 4.1.0-tuxcare.1...