← All advisories

High severity7.5NVD Advisory· Published Apr 24, 2023· Updated Jun 17, 2026

CVE-2023-2251

CVE-2023-2251

Description

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
yamlnpm	>= 2.0.0-5, < 2.2.2	2.2.2

Affected products

5

YAML Project/YAML
cpe:2.3:a:yaml_project:yaml:*:*:*:*:*:node.js:*:*
Range: >=2.0.0-5,<2.2.2
osv-coords3 versions
pkg:apk/chainguard/semaphore pkg:npm/yaml pkg:rpm/opensuse/element-web&distro=openSUSE%20Tumbleweed
< 2.18.12-r2+ 2 more
- (no CPE)range: < 2.18.12-r2
- (no CPE)range: >= 2.0.0-5, < 2.2.2
- (no CPE)range: < 1.11.30-2.1
eemeli/eemeli/yamlv5
Range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/eemeli/yaml/commit/984f5781ffd807e58cad3b5c8da1f940dab75fbanvdPatchWEB
huntr.dev/bounties/4b494e99-5a3e-40d9-8678-277f3060e96cnvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-f9xv-q969-pqx4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-2251ghsaADVISORY

News mentions

0

No linked articles in our index yet.