← All advisories

High severity8.8NVD Advisory· Published May 29, 2023· Updated Jun 17, 2026

CVE-2023-31874

CVE-2023-31874

Description

Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process').

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Yank Note/Yank Notedescription
Yank Note/Yank Note2 versions
cpe:2.3:a:yank-note:yank_note:3.52.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:yank-note:yank_note:3.52.1:*:*:*:*:*:*:*
- (no CPE)range: =3.52.1

Patches

Vulnerability mechanics

References

1

packetstormsecurity.com/files/172535/Yank-Note-3.52.1-Arbitrary-Code-Execution.htmlnvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.