VDB
CVE-2023-2251
CVE-2023-2251
PUBLISHED
CVSS 7.5 HIGH
Uncaught Exception in yaml
EPSS 0.57% · 69.2th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.57%
69.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | yaml | 2.0.0-5, 2.0.0-5, 2.0.0-5 |
| eemeli | eemeli/yaml | *, unspecified |
| yaml_project | yaml | 2.0.0-5, 2.0.0-5, 2.0.0-5 |
Timeline
- Apr 24, 2023 CVE Published
- Apr 25, 2023 EPSS Score
- Jun 1, 2023 EPSS Score
- Jun 28, 2023 CVE Updated
- Jul 9, 2023 EPSS Score
- Aug 15, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
- Oct 28, 2023 EPSS Score
- Dec 5, 2023 EPSS Score
- Jan 11, 2024 EPSS Score
- Mar 25, 2024 EPSS Score
- May 2, 2024 EPSS Score
References
- https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c url
- https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba url
- https://nvd.nist.gov/vuln/detail/CVE-2023-2251 advisory
- https://github.com/eemeli/yaml package
- https://advisory.splunk.com/advisories/SVD-2026-0512 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0513 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0509 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0510 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0505 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0515 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0507 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0506 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0508 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0504 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0514 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0516 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0501 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0503 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0511 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0502 advisory