Skip to content
OpenAdvisories

Vendor

yahoo

10 known vulnerabilities.

Products

serialize-javascript 5 elide 3 CMAK 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-92751

    CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter

    CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allowing attackers to perform state-changing actions on behalf of authenticated operators. Attackers can craft hidden forms that submit to destructive endpoints like topic deletion and…

    yahoo CMAK
  • High 8.1
    CVE-2022-24827

    SQL Injection in elide-datastore-aggregation

    Elide is a Java library that lets you stand up a GraphQL/JSON-API web service with minimal effort. When leveraging the following together: Elide Aggregation Data Store for Analytic Queries, Parameterized Columns (A column that requires a client provided param…

    yahoo elide com.yahoo.elide:elide-datastore-aggregation Maven