github.com/jhaals/yopass vulnerabilities

CVEs whose affected-version data names the github.com/jhaals/yopass package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107840High· 7.5

3w ago

yopass is a service for securely sharing secrets, passwords, and files

yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-controlled r.Method value directly as the method label for yopas…

▾ Twilightjhaals · github.com/jhaals/yopassEPSS 0.44%via NVD