CVE-2019-6285: The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attacker...

Security readout for executives and security teams

CVE-2019-6285 is a denial-of-service issue in yaml-cpp 0.6.2. An attacker who can supply YAML to an affected application may be able to crash that application through stack exhaustion. The public record does not provide CVSS scoring, confirmed real-world exploitation, or a named fixed version. Exposure is most likely in applications or services that include yaml-cpp 0.6.2 and parse YAML from users, uploads, repositories, integrations, or other untrusted sources. Prioritize remediation for internet-facing or customer-facing systems that parse YAML. Internal-only systems with trusted YAML input are lower urgency, but still need inventory and vendor tracking because the public data lacks a complete fix story. Mitigation focus: Inventory applications and libraries that use yaml-cpp 0.6.2.; Check yaml-cpp and vendor guidance for fixed versions or supported backports.; Avoid parsing untrusted YAML where business workflows allow it..

Prepared

Jun 7, 2026, 04:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.