Go/github.com/yokecd/yoke CVE-2026-26056: high 8.8, EPSS 0.46%

Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-wj8p-jj64-h7ff
• https://github.com/yokecd/yoke/security/advisories/GHSA-wj8p-jj64-h7ff
• https://nvd.nist.gov/vuln/detail/CVE-2026-26056
• https://github.com/yokecd/yoke

CVE-2026-26056 · published 2026-02-12T22:06:45Z · modified 2026-02-19T20:41:00.924491Z · JSON