PatchTheCVEyeti vulnerabilities and fixes
Recent CVEs affecting yeti, with upgrade or downgrade steps. 2 tracked.
yeti has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-05-08. Highest priority: CVE-2024-46507 (score 61/100).
- CVE-2024-46508 HIGH 7.5 UPGRADE yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (b
- CVE-2024-46507 HIGH 7.3 UPGRADE A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform
FAQ
How do I fix yeti vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yeti being exploited right now?
None of the tracked yeti CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yeti CVE should I patch first?
CVE-2024-46507 currently ranks highest (61/100): A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform .