Known Vulnerabilities for Yaml by Symfony
Listed below are 10 of the newest known vulnerabilities associated with "Yaml" by "Symfony".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111690 json | Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forg... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109413 json | In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through ... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-109391 json | Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109282 json | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, wher... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-108593 json | 9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endp... | Not Provided | 2026-10-10 | 2026-10-13 |
| CVE-2026-107850 json | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access ... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-103413 json | Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a pro... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-101043 json | pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProx... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100669 json | Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In we... | Not Provided | 2026-09-26 | 2026-09-30 |