PatchTheCVEyank note vulnerabilities and fixes
Recent CVEs affecting yank note, with upgrade or downgrade steps. 1 tracked.
Also searched as: yanknote.
yank note has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-29. Highest priority: CVE-2023-31874 (score 59/100).
- CVE-2023-31874 HIGH 8.8 DOWNGRADE Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire(
FAQ
How do I fix yank note vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yank note being exploited right now?
None of the tracked yank note CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yank note CVE should I patch first?
CVE-2023-31874 currently ranks highest (59/100): Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire(.