Uncontrolled Recursion

🗓️ 25 Mar 2026 20:08:24Reported by Snyk Security DatabaseType

Uncontrolled recursion in YAML parsing may trigger a RangeError; upgrade to 1.10.3 or 2.8.3.

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses yaml-2.7.0.tgz which is vulnerable to CVE-2026-33532.	17 Jul 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: : Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in dependencies	8 Jun 202614:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.	3 Jun 202607:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	12 Jun 202611:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Uncontrolled Recursion due to Node.js module yaml (CVE-2026-33532)	9 Jun 202608:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.	22 Jul 202613:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-33532)	23 Apr 202614:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm

Vulners

Node

yaml_project yamlRange1.0.0–1.10.3

yaml_project yamlRange2.0.0–2.8.3

Source	Link
cwe	www.cwe.mitre.org/data/definitions/CWE-674.html
security	www.security.snyk.io/vuln/SNYK-JS-YAML-15765520

29 Mar 2026 08:55Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.3 - 6.5

CVSS 45.3

EPSS0.0047

SSVC