Approved changes feed: RSS · Atom

cpe:2.3:a:pyyaml:libyaml:0.1.4:*:*:*:*:*:*:*

part: a version: 0.1.4 update: *

VendorPyyaml (5d34acb3-0d0f-5f7a-b9a5-555c650c6d60)
ProductLibyaml (0865527d-41ea-5562-8f73-6b22793917d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cpan/yaml-libyaml purl2cpe 2026-06-01 10:12:38.271101
pkg:deb/debian/libyaml purl2cpe 2026-06-01 10:12:38.271102
pkg:deb/ubuntu/libyaml purl2cpe 2026-06-01 10:12:38.271104
pkg:github/yaml/libyaml purl2cpe 2026-06-01 10:12:38.271105
pkg:pypi/pylibyaml purl2cpe 2026-06-01 10:12:38.271106
pkg:rpm/fedora/libyaml purl2cpe 2026-06-01 10:12:38.271108
pkg:rpm/opensuse/libyaml purl2cpe 2026-06-01 10:12:38.271109

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2525 vulnerable 2026-06-08 05:05:29.043491 Details available
Heap-based buffer overflow in the yaml_parser_scan_uri_escapes function in LibYAML before 0.1.6 allows context-dependent attackers to execute arbitrary code via a long sequence of percent-encoded characters in a URI in a YAML file.
Published: 2014-03-28T15:00:00.000Z
Updated: 2024-08-06T10:14:26.613Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.