yahoo
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 5
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/24/2026, yahoo recorded 5 security vulnerabilities in the last 90 days across 2 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, serialize-javascript had the most security vulnerabilities in the yahoo ecosystem, with 3 vulnerabilities—approximately 60% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115897Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function bodyCVE-2026-115754serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function bodyCVE-2026-97711Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodiesCVE-2026-92778CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form RoutesCVE-2026-92751CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter76 Results | Page 1 of 8
| SeverityLow |
| SeverityLow |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |