Browse all 6 CVE security advisories affecting yeti-platform. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-63500 | Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export — yeti CWE-22 | 7.1 | High | 2026-11-03 |
| CVE-2026-63502 | Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write — yeti CWE-22 | 8.3 | High | 2026-11-03 |
| CVE-2026-63482 | Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data — yeti CWE-306 | 7.5 | High | 2026-11-03 |
| CVE-2026-63489 | Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters — yeti CWE-943 | 7.6 | High | 2026-11-03 |
| CVE-2026-92783 | Yeti through 2.11.0 Missing Authorization on RBAC Relationship Deletion — yeti CWE-862 | 8.1 | High | 2026-09-16 |
| CVE-2024-45412 | Yeti affected by a Potential Denial of Service due to the One Milion Unicode characters attack — yeti CWE-770 | 5.3 | Medium | 2024-09-10 |
This page lists every published CVE security advisory associated with yeti-platform. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.