biojppm vulnerabilities

Products

• rapidyaml 1

Latest biojppm CVEs

Newest publication first

1. CVE-2026-120455 rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::_add_annotation()

   Published 2026-11-02

   Medium·CVSS 6.9 EPSS 0.12%

   rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-ele...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.