Known Vulnerabilities for Yaml by Toddr
Listed below are 10 of the newest known vulnerabilities associated with "Yaml" by "Toddr".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-90946 json | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-86516 json | A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-84375 json | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2 and 4.3.2, maxTotalMergeKeys in lib/js-yaml/loader.js... | Not Provided | 2026-09-01 | 2026-09-02 |
| CVE-2026-84202 json | ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Pyt... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-84179 json | Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and returned ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82426 json | Description Nimbus accepted the `uploadedJarLocation` argument of `submitTopology` / `submitTopologyWithOpts` as a server-si... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-82392 json | pnpm is a package manager. Prior to 10.34.5 and from 11.0.0 until 11.11.0, pnpm parses the package name from attacker-control... | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-80352 json | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection vulnerability ... | Not Provided | 2026-09-10 | 2026-09-10 |
| CVE-2026-79784 json | Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in v... | Not Provided | 2026-08-25 | 2026-08-26 |
| CVE-2026-76833 json | @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaSc... | Not Provided | 2026-08-20 | 2026-08-20 |