VDB
CVE-2023-2251
CVE-2023-2251
PUBLISHED
CVSS 7.5 HIGH
Uncaught Exception in yaml
EPSS 1.09% · 64.3th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.09%
64.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | yaml | 2.0.0-5, 2.0.0-5, 2.0.0-5 |
| eemeli | eemeli/yaml | *, unspecified |
| yaml_project | yaml | 2.0.0-5, 2.0.0-5, 2.0.0-5 |
Timeline
- Apr 24, 2023 CVE Published
- Apr 25, 2023 EPSS Score
- Jun 2, 2023 EPSS Score
- Jul 10, 2023 EPSS Score
- Aug 17, 2023 EPSS Score
- Sep 23, 2023 EPSS Score
- Dec 8, 2023 EPSS Score
- Jan 15, 2024 EPSS Score
- Feb 22, 2024 EPSS Score
- Mar 31, 2024 EPSS Score
- May 8, 2024 EPSS Score
- Jun 14, 2024 EPSS Score
References
- https://github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fba fix
- https://huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96c url
- https://nvd.nist.gov/vuln/detail/CVE-2023-2251 advisory
- https://github.com/eemeli/yaml package
- https://advisory.splunk.com/advisories/SVD-2026-0515 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0512 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0510 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0507 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0503 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0502 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0513 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0508 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0504 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0511 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0509 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0506 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0514 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0501 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0505 advisory
- https://advisory.splunk.com/advisories/SVD-2026-0516 advisory