Filtered by vendor Mikefarah Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-124987 1 Mikefarah 1 Yq 2026-11-09 6.3 Medium
A vulnerability has been found in mikefarah yq up to 4.53.3. This affects the function Encode of the file pkg/yqlib/encoder_properties.go. Such manipulation leads to escaping of output. It is possible to launch the attack remotely. The pull request to fix this issue awaits acceptance.