Arjun Jain

**Name of the Vulnerable Software and Affected Versions** @cgauge/yaml npm package (affected versions not specified) **Description** An issue exists where attackers can execute arbitrary JavaScript by embedding a custom `!js` YAML tag. During document parsing, the construct callback unconditionally calls the `eval()` function on attacker-supplied string values. Applications parsing untrusted YAML input using this library are exposed to full Node.js runtime authority, which includes the ability to access environment variables, read and write to the filesystem, access the network, and execute subprocesses. There is no safe-mode alternative or opt-out mechanism available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Atlas-Livre (affected versions not specified) **Description** Improper access control exists within the admin controllers located under `Espace admin/controleur/`. Unauthenticated attackers can bypass session-based authentication guards by sending raw HTTP requests that ignore redirects. This occurs because the PHP `header()` redirect function is not followed by an `exit` or `die` call, allowing subsequent code and database operations to execute regardless of the session state. Attackers can trigger destructive administrative actions, such as record deletion, by targeting controller endpoints using the `supp` GET parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Atals-Livre (affected versions not specified) **Description** Atals-Livre contains a SQL injection flaw that allows attackers to manipulate database queries. This occurs when unsanitized input is passed through a GET parameter to the `supp()` deletion helper function. Attackers can inject malicious SQL syntax to perform unauthorized database operations, such as extracting or deleting data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.