Threats affecting pkg:github/virustotal/yara

CVE-2026-88341 is a reachable assertion vulnerability in YARA version 4.5.8. It occurs when loading specially crafted compiled rule files (.yrc) with an invalid arena configuration (num_buffers=0), causing an assertion failure that terminates the application. The vulnerability has a medium severity rating with a CVSS score of 5.5 and impacts availability without affecting confidentiality or integrity.