{"action":"Upgrade libyaml to 0.2.3 or later.","affected":[{"fixed":"0.2.3","introduced":"0"}],"component":"libyaml","cve_ids":["CVE-2013-6393"],"ecosystem":"npm","epss":0.07386,"exploited":false,"fixed_versions":["0.2.3"],"ghsa_id":"GHSA-m75h-cghq-c8h5","id":"tcs_01M5KFZYNTQF0QMWKZV2X1G29Y","modified_at":"2023-11-08T03:57:25.877815Z","published_at":"2020-08-31T22:51:50Z","references":["https://osv.dev/vulnerability/GHSA-m75h-cghq-c8h5","https://nvd.nist.gov/vuln/detail/CVE-2013-6393","https://bitbucket.org/xi/libyaml","https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048","https://bitbucket.org/xi/libyaml/commits/tag/0.1.5","https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff","https://bugzilla.redhat.com/show_bug.cgi?id=1033990","https://puppet.com/security/cve/cve-2013-6393","https://support.apple.com/kb/HT6536","https://web.archive.org/web/20140302205713/http://www.securityfocus.com/bid/65258","https://web.archive.org/web/20150523055002/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:060/?name=MDVSA-2015:060","https://www.npmjs.com/advisories/21","http://advisories.mageia.org/MGASA-2014-0040.html","http://archives.neohapsis.com/archives/bugtraq/2014-04/0134.html","http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html","http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-6393","http://lists.opensuse.org/opensuse-updates/2014-02/msg00064.html","http://lists.opensuse.org/opensuse-updates/2014-02/msg00065.html","http://lists.opensuse.org/opensuse-updates/2015-02/msg00078.html","http://lists.opensuse.org/opensuse-updates/2016-04/msg00050.html","http://rhn.redhat.com/errata/RHSA-2014-0353.html","http://rhn.redhat.com/errata/RHSA-2014-0354.html","http://rhn.redhat.com/errata/RHSA-2014-0355.html","http://www.debian.org/security/2014/dsa-2850","http://www.debian.org/security/2014/dsa-2870","http://www.ubuntu.com/usn/USN-2098-1"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-m75h-cghq-c8h5","url":"https://osv.dev/vulnerability/GHSA-m75h-cghq-c8h5"}],"summary":"Heap Based Buffer Overflow in libyaml"}