Approved changes feed: RSS · Atom

cpe:2.3:a:yaml-cpp_project:yaml-cpp:0.6.2:*:*:*:*:*:*:*

part: a version: 0.6.2 update: *

VendorYaml Cpp Project (dc417626-1032-5c9c-8ebb-5ef51c59eaab)
ProductYaml Cpp (98857751-ddae-57d6-bef3-b8df5d732c6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/yaml-cpp purl2cpe 2026-06-01 10:11:19.772213
pkg:deb/ubuntu/yaml-cpp purl2cpe 2026-06-01 10:11:19.772214
pkg:github/jbeder/yaml-cpp purl2cpe 2026-06-01 10:11:19.772215
pkg:gitlab/redhat/yaml-cpp purl2cpe 2026-06-01 10:11:19.772217
pkg:rpm/fedora/yaml-cpp purl2cpe 2026-06-01 10:11:19.772218
pkg:rpm/opensuse/yaml-cpp purl2cpe 2026-06-01 10:11:19.772219

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6292 vulnerable 2026-06-08 05:14:10.461897 Details available
An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser, and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap, HandleMap, HandleFlowSequence, HandleSequence, HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.
Published: 2019-01-15T00:00:00.000Z
Updated: 2024-09-16T17:19:09.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6285 vulnerable 2026-06-08 05:14:10.453578 Details available
The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Published: 2019-01-14T22:00:00.000Z
Updated: 2025-11-03T21:44:13.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20574 vulnerable 2026-06-08 05:11:27.556322 Details available
The SingleDocParser::HandleFlowMap function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Published: 2018-12-28T16:00:00.000Z
Updated: 2025-11-03T21:44:08.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20573 vulnerable 2026-06-08 05:11:27.555933 Details available
The Scanner::EnsureTokensInQueue function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.
Published: 2018-12-28T16:00:00.000Z
Updated: 2025-11-03T21:44:07.301Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.