YVES vulnerabilities
We track 3 vulnerabilities in YVES products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 31, 2026.
Latest YVES vulnerabilities
- 8.1 High severity
Sereal::Decoder: Out-of-bounds Read
Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input. In Perl/Decoder/srl_decoder.c, srl_read_object() and srl_read_hash() process a COPY tag, a back-reference whose target byte the decoder re-decodes as a fresh tag. W
- 8.1 High severity
Sereal::Encoder: Out-of-bounds Write
Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass
- 8.1 High severity
Sereal::Decoder: Out-of-bounds Write
Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass