@cgauge/yaml vulnerabilities

1 known vulnerability in @cgauge/yaml from Cgauge. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  @cgauge/yaml: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2026-76833Aug 20, 2026Cgauge

  @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval() on attacker-supplied string values during