Security update for yq

🗓️ 27 May 2026 14:20:25Reported by SuseType

suse🔗 www.suse.com👁 21 Views

Security update for yq to 4.53.2 fixes multiple CVEs in HTML and HTTP/2.

Reporter	Title	Published	Views	Family All 4727
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (July 2026 - Part 2 of 2)	7 Aug 202601:27	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	16 Jun 202616:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	21 Jan 202605:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	27 Aug 202619:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	16 Oct 202513:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	19 Jun 202517:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM Sterling Order Management	24 Jun 202611:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Cross-site Scripting in golang.org/x/net/proxy [CVE-2025-22872]	31 Oct 202518:33	–	ibm

Source	Link
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugzilla	www.bugzilla.suse.com/show_bug.cgi
suse	www.suse.com/security/cve/CVE-2025-22872.html
suse	www.suse.com/security/cve/CVE-2025-47911.html
suse	www.suse.com/security/cve/CVE-2025-58190.html
suse	www.suse.com/security/cve/CVE-2026-33814.html
suse	www.suse.com/security/cve/CVE-2025-22872.html
suse	www.suse.com/security/cve/CVE-2025-47911.html

27 May 2026 14:20Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 46.9

EPSS0.00781

yq update html parsing issue http two issue memory usage issue security update