pantoniou CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM pantoniou CVE published 2026-09-24

CVE-2026-88359

CVE-2026-88359 is a stack exhaustion vulnerability in libfyaml 0.9.6, which can cause a denial of service when processing a specially crafted YAML document. The vulnerability is caused by the fy_atom_iter_format() function repeatedly growing an internal buffer using alloca() inside a loop, leading to cumulative stack growth that can exceed the process stack limit and result in SIGSEGV. Defenders responsib [truncated]