yopass vulnerabilities

1 known vulnerability in yopass from Jhaals. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  yopass: Uncontrolled Resource Consumption

  CVE-2026-107840Oct 9, 2026Jhaals

  yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopass_http_requests_total a