Approved changes feed: RSS · Atom

cpe:2.3:a:yaml-cpp_project:yaml-cpp:0.5.3:*:*:*:*:*:*:*

part: a version: 0.5.3 update: *

VendorYaml Cpp Project (dc417626-1032-5c9c-8ebb-5ef51c59eaab)
ProductYaml Cpp (98857751-ddae-57d6-bef3-b8df5d732c6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/yaml-cpp purl2cpe 2026-06-01 10:11:19.772188
pkg:deb/ubuntu/yaml-cpp purl2cpe 2026-06-01 10:11:19.772190
pkg:github/jbeder/yaml-cpp purl2cpe 2026-06-01 10:11:19.772191
pkg:gitlab/redhat/yaml-cpp purl2cpe 2026-06-01 10:11:19.772192
pkg:rpm/fedora/yaml-cpp purl2cpe 2026-06-01 10:11:19.772194
pkg:rpm/opensuse/yaml-cpp purl2cpe 2026-06-01 10:11:19.772195

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5950 vulnerable 2026-06-08 05:09:50.167513 Details available
The SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Published: 2017-04-03T05:44:00.000Z
Updated: 2025-11-03T21:44:04.287Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.