Skip to content
OpenAdvisories

Package · Hex

ymlr

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.1
    CVE-2026-65636

    YAML injection via unescaped newlines in ymlr document comments

    Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr (Elixir.Ymlr module) allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment s…

    ufirstgroup ymlr ymlr Hex