Skip to content
OpenAdvisories

Vendor

cgauge

1 known vulnerabilities.

Products

@cgauge/yaml 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-76833

    @cgauge/yaml npm Package Arbitrary Code Execution via eval() YAML Tag

    @cgauge/yaml npm package contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary JavaScript by embedding a custom !js YAML tag whose construct callback unconditionally calls eval() on attacker-supplied string values durin…

    cgauge @cgauge/yaml