PT-2026-135471
CVE-2026-120455
·
تاريخ النشر
2026-11-02
·
تاريخ التحديث
2026-11-02
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine:: add annotation() that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. Attackers can submit YAML with consecutive anchors or tags to overflow the fixed two-element annotation array in release builds, corrupting stack memory and crashing the process.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾