Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Yank-note records in CISA KEVNo Yank-note vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_process').
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04898 · Published 2023-05-28 · No fix listed CWE-732
Open these records in search →