Vulnerability Description
An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components
CVSS Score
5.1
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Related Weaknesses (CWE)
References
- https://github.com/jbeder/yaml-cpp/issues/1475
- https://github.com/jbeder/yaml-cpp/pull/1476
- https://github.com/jbeder/yaml-cpp/issues/1475
FAQ
What is CVE-2026-75432?
CVE-2026-75432 is a vulnerability with a CVSS score of 5.1 (MEDIUM). An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components
How severe is CVE-2026-75432?
CVE-2026-75432 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75432?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.