Threats affecting pkg:github/yugaware

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.4	EPSS 0.2%	CVE-2026-1966YugabyteDB Anywhere · Insufficiently Protected Credentials Low2.4EPSS 0.2%2026-02-05CVE Database V5CVE-2026-1966 YugabyteDB Anywhere displays LDAP bind passwords configured via gflags in cleartext within the web UI. An authenticated user with access to the configuration view could obtain LDAP credentials, potentially enabling unauthorized access to external directory services. EPSS 0.2%Vulnerability CWE-522	CVE Database V5	2026-02-05

Page 1 of 1