Known Vulnerabilities for Yaml by Toddr
Listed below are 10 of the newest known vulnerabilities associated with "Yaml" by "Toddr".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73643 json | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential ti... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-72825 json | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allow... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-72735 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, writeTraefikConfigRemote in packages/server/... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-71438 json | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 1... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-71259 json | ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/config_validation.py. Bec... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-69098 json | kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unaut... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-66297 json | Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebo... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2026-65636 json | Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inject a... | Not Provided | 2026-07-31 | 2026-08-01 |
| CVE-2026-63294 json | A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the imp... | Not Provided | 2026-08-12 | 2026-08-13 |
| CVE-2026-63293 json | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host syst... | Not Provided | 2026-08-12 | 2026-08-13 |