CVE-2026-65636: ymlr 0.0.1 to before 5.1.6

Affected technology

ymlr · 0.0.1 to before 5.1.6
ufirstgroup

ymlr · 0c11a86de83825e91c27cecaccb03f36416d8fe0 to before 42a0bf8b2af44b0e7c42d0b7044c8588ca5866dc
ufirstgroup

Component: Elixir.Ymlr
Function: 'Elixir.Ymlr':document!/2, 'Elixir.Ymlr':documents!/2
File: lib/ymlr.ex

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 2.1/10) rates confidentiality and availability impact as none; integrity impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.