Yahoo vulnerabilities
We track 3 vulnerabilities in Yahoo products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Yahoo vulnerabilities
- 8.1 High severity
CMAK: Cross-Site Request Forgery
CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and
- 7.5 High severity
serialize-javascript: Uncontrolled Resource Consumption
Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object t
- 8.1 High severity
elide: Improper Neutralization of Special Elements used in an SQL Command
Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provided parame