{"id":"DEBIAN-CVE-2026-75432","details":"An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo() components","modified":"2026-09-25T21:00:07.181860218Z","published":"2026-09-22T20:17:05.377Z","upstream":["CVE-2026-75432"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-75432"}],"affected":[{"package":{"name":"yaml-cpp","ecosystem":"Debian:12","purl":"pkg:deb/debian/yaml-cpp?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.0+dfsg-8","0.8.0+dfsg-1","0.8.0+dfsg-2","0.8.0+dfsg-3","0.8.0+dfsg-4","0.8.0+dfsg-5","0.8.0+dfsg-6","0.8.0+dfsg-7","0.8.0+dfsg-8","0.8.0+dfsg-9","0.9.0+dfsg-1","0.9.0+dfsg-2","0.9.0+dfsg-3","0.9.0+dfsg-4","0.9.0+dfsg-5","0.9.0+dfsg-6","0.9.0+dfsg-7","0.9.0+dfsg-8","0.9.0+dfsg-9"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"}},{"package":{"name":"yaml-cpp","ecosystem":"Debian:13","purl":"pkg:deb/debian/yaml-cpp?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0+dfsg-7","0.8.0+dfsg-8","0.8.0+dfsg-9","0.9.0+dfsg-1","0.9.0+dfsg-2","0.9.0+dfsg-3","0.9.0+dfsg-4","0.9.0+dfsg-5","0.9.0+dfsg-6","0.9.0+dfsg-7","0.9.0+dfsg-8","0.9.0+dfsg-9"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"}},{"package":{"name":"yaml-cpp","ecosystem":"Debian:14","purl":"pkg:deb/debian/yaml-cpp?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.8.0+dfsg-7","0.8.0+dfsg-8","0.8.0+dfsg-9","0.9.0+dfsg-1","0.9.0+dfsg-2","0.9.0+dfsg-3","0.9.0+dfsg-4","0.9.0+dfsg-5","0.9.0+dfsg-6","0.9.0+dfsg-7","0.9.0+dfsg-8","0.9.0+dfsg-9"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-75432.json"}}],"schema_version":"1.9.0"}