Yeti-Platform: >> Yeti >> 2.1.11 Security Vulnerabilities
A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.
CVSS Score
7.3
EPSS Score
0.003
Published
2026-05-08
yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (by setting YETI_AUTH_SECRET_KEY to a value other than SECRET).
CVSS Score
7.5
EPSS Score
0.005
Published
2026-05-08