Threats affecting pkg:github/mikefarah/yq

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-124987mikefarah yq · Escaping of Output Medium5.32026-11-09CVE Database V5CVE-2026-124987 CVE-2026-124987 is a medium severity vulnerability in mikefarah yq versions 4.53.0 through 4.53.3. It involves improper escaping of output in the Encode function of pkg/yqlib/encoder_properties.go, which can be exploited remotely. A fix has been proposed but not yet accepted. Vulnerability	CVE Database V5	2026-11-09

Page 1 of 1