yahoo vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20201
3. 20221
4. 20267

Newest CVEs

• CVE-2026-115897

  Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

  yahoo · serialize-javascript

  Low2.1
• CVE-2026-115754

  serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

  yahoo · serialize-javascript

  Low2.3
• CVE-2026-97711

  Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

  yahoo · serialize-javascript

  Low2.3
• CVE-2026-92778

  CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes

  yahoo · CMAK

  Medium5.3
• CVE-2026-92751

  CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter

  yahoo · CMAK

  High7.2
• CVE-2026-57954

  Elide 7.1.17 - Permission Bypass in Sort Expression Validation

  yahoo · elide

  Medium5.3
• CVE-2026-34043

  Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

  yahoo · serialize-javascript

  Medium5.9
• CVE-2022-24827

  SQL Injection in elide-datastore-aggregation

  yahoo · elide

  High8.1
• CVE-2020-5289

  Read permissions not enforced for client provided filter expressions in Elide http client

  yahoo · elide

  Medium6.8
• CVE-2019-16769

  Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)

  yahoo · serialize-javascript

  Medium4.2