DEBIAN-CVE-2026-75432

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-75432
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-75432
Upstream
  • CVE-2026-75432
Published
2026-09-22T20:17:05Z
Modified
2026-09-25T21:00:07Z
Summary
[none]
Details

An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components

References

Affected packages

Debian:12 / yaml-cpp

Package

Name
yaml-cpp
Purl
pkg:deb/debian/yaml-cpp?arch=source&distro=bookworm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.7.0+dfsg-8
0.8.0+dfsg-1
0.8.0+dfsg-2
0.8.0+dfsg-3
0.8.0+dfsg-4
0.8.0+dfsg-5
0.8.0+dfsg-6
0.8.0+dfsg-7
0.8.0+dfsg-8
0.8.0+dfsg-9
0.9.0+dfsg-1
0.9.0+dfsg-2
0.9.0+dfsg-3
0.9.0+dfsg-4
0.9.0+dfsg-5
0.9.0+dfsg-6
0.9.0+dfsg-7
0.9.0+dfsg-8
0.9.0+dfsg-9

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"

Debian:13 / yaml-cpp

Package

Name
yaml-cpp
Purl
pkg:deb/debian/yaml-cpp?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8.0+dfsg-7
0.8.0+dfsg-8
0.8.0+dfsg-9
0.9.0+dfsg-1
0.9.0+dfsg-2
0.9.0+dfsg-3
0.9.0+dfsg-4
0.9.0+dfsg-5
0.9.0+dfsg-6
0.9.0+dfsg-7
0.9.0+dfsg-8
0.9.0+dfsg-9

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"

Debian:14 / yaml-cpp

Package

Name
yaml-cpp
Purl
pkg:deb/debian/yaml-cpp?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.8.0+dfsg-7
0.8.0+dfsg-8
0.8.0+dfsg-9
0.9.0+dfsg-1
0.9.0+dfsg-2
0.9.0+dfsg-3
0.9.0+dfsg-4
0.9.0+dfsg-5
0.9.0+dfsg-6
0.9.0+dfsg-7
0.9.0+dfsg-8
0.9.0+dfsg-9

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"