Cgauge vulnerabilities
We track 1 vulnerability in Cgauge products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest Cgauge vulnerabilities
- 7.8 High severity
@cgauge/yaml: Improper Neutralization of Directives in Dynamically Evaluated Code
@cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval() on attacker-supplied string values during