Known Vulnerabilities for Yaml by Yaml Project
Listed below are 4 of the newest known vulnerabilities associated with "Yaml" by "Yaml Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-101043 json | pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProx... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-100844 json | MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner).... | Not Provided | 2026-09-27 | 2026-09-28 |
| CVE-2026-100669 json | Grav before 2.0.25 ships web server configuration samples whose access-control deny rules are matched case-sensitively. In we... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-98021 json | In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_queue_len at netlink parse time... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-90946 json | DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/chat WebSocket ... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-88359 json | libfyaml 0.9.6 contains a stack exhaustion vulnerability in fy_atom_iter_format(). When processing a specially crafted YAML d... | Not Provided | 2026-09-24 | 2026-09-25 |
| CVE-2026-88064 json | Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/p... | Not Provided | 2026-09-16 | 2026-09-16 |
| CVE-2026-86516 json | A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-86064 json | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /log WebSocket ro... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-85526 json | Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instanc... | Not Provided | 2026-09-28 | 2026-09-29 |