eemeli vulnerabilities

Products

• eemeli/yaml 1
• yaml 1

Latest eemeli CVEs

Newest publication first

1. CVE-2026-33532 yaml is vulnerable to Stack Overflow via deeply nested YAML collections

   Published 2026-03-26

   Medium·CVSS 4.3

   yaml is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of yaml on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase uses recursive function...

2. CVE-2023-2251 Uncaught Exception in eemeli/yaml

   Published 2023-04-24

   High·CVSS 7.5

   Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.