yoke vulnerabilities

2 known vulnerabilities in yoke from Yokecd. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  yoke: Improper Control of Generation of Code

  CVE-2026-26056Feb 12, 2026Yokecd

  Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the

• 7.5 High severity

  yoke: Missing Authentication for Critical Functionality

  CVE-2026-26055Feb 12, 2026Yokecd

  Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod within