yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.
{ "urgency": "not yet assigned" }