Skip to content
OpenAdvisories

Package · Go

github.com/yokecd/yoke

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-26056

    Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

    Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the…

    yokecd yoke github.com/yokecd/yoke Go
  • High 7.5
    CVE-2026-26055

    Unauthenticated Admission Webhook Endpoints in Yoke ATC

    Yoke is a Helm-inspired infrastructure-as-code (IaC) package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller (ATC) component of Yoke. The ATC webhook endpoints lack proper authentication mechanisms, allowing any pod withi…

    yokecd yoke github.com/yokecd/yoke Go