High
CVSS 8.8
Overview
Deserialization of Untrusted Data vulnerability in NooTheme Yogi allows Object Injection. This issue affects Yogi: from n/a through 2.9.0.
CVE-2025-24779
Deserialization of Untrusted Data vulnerability in NooTheme Yogi allows Object I...
Risk analysis
This vulnerability is rated 🟠 HIGH.
- CVSS: 8.8 (HIGH)
- Detected tags: deserialization (tag impact: MODERATE)
Recommended actions:
- Avoid untrusted deserialization; prefer safe formats (JSON) and signatures.