Read the docs

YVES

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

YVES records in CISA KEV

No YVES vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

TI-2024-13025 CVE-2024-14031 · GHSA-hhqv-q79g-jgfm

Out-of-bounds write in YVES Sereal::Encoder

Priority LOW 37

Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00361 Published 2026-03-31 No fix listed CWE-1395
TI-2024-13024 CVE-2024-14030 · GHSA-93rm-8cxm-wfv4

Out-of-bounds write in YVES Sereal::Decoder

Priority LOW 37

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00361 Published 2026-03-31 No fix listed CWE-1395
TI-2026-07733 CVE-2026-8796 · GHSA-xhpj-269v-vq2q

Out-of-bounds read in YVES Sereal::Decoder

Priority LOW 35

Sereal::Decoder versions before 5.005 for Perl allow heap out-of-bounds read via crafted input.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00399 Published 2026-05-31 Fixed in 5.005 CWE-125
Open these records in search →