Known Vulnerabilities for Yaml by Yaml Project
Listed below are 4 of the newest known vulnerabilities associated with "Yaml" by "Yaml Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76833 json | @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaSc... | Not Provided | 2026-08-20 | 2026-08-20 |
| CVE-2026-76232 json | Renovate versions from 31.51.0 before 40.33.0 contain a command injection vulnerability in the helmv3 manager where the repos... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76229 json | Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager ... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-73643 json | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 until 5.2.2, parsing a small YAML document can take exponential ti... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-72825 json | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allow... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-72735 json | Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, writeTraefikConfigRemote in packages/server/... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-71438 json | Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Prior to 10.9.8 and 1... | Not Provided | 2026-08-06 | 2026-08-07 |
| CVE-2026-71259 json | ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/config_validation.py. Bec... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-69098 json | kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unaut... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-66297 json | Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebo... | Not Provided | 2026-08-05 | 2026-08-06 |