Known Vulnerabilities for Yaml by Yaml Project
Listed below are 4 of the newest known vulnerabilities associated with "Yaml" by "Yaml Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59870 json | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-59869 json | js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadr... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59868 json | js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadr... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59195 json | pnpm is a package manager. Prior to 10.34.4 and 11.8.0, pnpm accepts package names from the env lockfile configDependencies s... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58493 json | grav-plugin-database is the database plugin for Grav CMS. Prior to 1.2.0, Database::__call builds PDO DSN strings by directly... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-55885 json | Grav is a file-based Web platform. Prior to 1.7.53, an authenticated administrator with backup permissions can download a ZIP... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-55698 json | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can persist package-manager bootstrap metadata in the first YAML... | Not Provided | 2026-06-25 | 2026-06-26 |
| CVE-2026-55697 json | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm can install configDependencies declared in pnpm-workspace.yaml b... | Not Provided | 2026-06-25 | 2026-06-29 |
| CVE-2026-55180 json | pnpm is a package manager. Prior to 10.34.2 and 11.5.3, pnpm and pacquet expanded ${ENV_VAR} placeholders from repository-con... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-55175 json | Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 20... | Not Provided | 2026-07-10 | 2026-07-10 |