yahoo vulnerabilities
10 published CVEs name yahoo among the affected products.
- 10Published CVEs10 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115897
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
yahoo · serialize-javascript
Low2.1 - CVE-2026-115754
serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
yahoo · serialize-javascript
Low2.3 - CVE-2026-97711
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies
yahoo · serialize-javascript
Low2.3 - CVE-2026-92778
CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes
yahoo · CMAK
Medium5.3 - CVE-2026-92751
CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter
yahoo · CMAK
High7.2 - CVE-2026-57954
Elide 7.1.17 - Permission Bypass in Sort Expression Validation
yahoo · elide
Medium5.3 - CVE-2026-34043
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
yahoo · serialize-javascript
Medium5.9 - CVE-2022-24827
SQL Injection in elide-datastore-aggregation
yahoo · elide
High8.1 - CVE-2020-5289
Read permissions not enforced for client provided filter expressions in Elide http client
yahoo · elide
Medium6.8 - CVE-2019-16769
Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
yahoo · serialize-javascript
Medium4.2