CyberSecBulletin

Jhaals vulnerabilities

We track 1 vulnerability in Jhaals products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Jhaals vulnerabilities

  • 7.5 High severity

    yopass: Uncontrolled Resource Consumption

    CVE-2026-107840Jhaals

    yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total a