js-yaml Security Advisories - Npm | Ecosyste.ms: Advisories

js-yaml

YAML 1.2 parser and serializer

View on github.com · View on npmjs.org

Security Advisories for js-yaml in npm

Moderate

about 1 month ago

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources GSA_kwCzR0hTQS1yM3BoLXc3Z2otZzZ4bc4AB6_n

npm js-yaml

High

about 2 months ago

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources GSA_kwCzR0hTQS0yODgzLXhjZzMtdjNoaM4ABu9F

npm js-yaml

High

3 months ago

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported GSA_kwCzR0hTQS01cDRtLTJ3Zm0teG1xas4ABhoS

npm js-yaml

High

3 months ago

js-yaml: Exponential parsing time in flow collections leads to denial of service GSA_kwCzR0hTQS1wbTRtLXBoMzItZ2h2Nc4ABfrB

npm js-yaml

Moderate

3 months ago

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml GSA_kwCzR0hTQS1nNzk2LWZnbWctOTNtds4ABcP_

npm js-yaml

High

3 months ago

js-yaml: YAML merge-key chains can force quadratic CPU consumption GSA_kwCzR0hTQS01MmNwLXI1NTktY3Azbc4ABcP-

npm js-yaml

Moderate

3 months ago

js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA GSA_kwCzR0hTQS03MjRnLW14cmctNHF2bc4ABcP9

npm js-yaml

Moderate

5 months ago

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases GSA_kwCzR0hTQS1oNjdwLTU0aHEtcnA2OM4ABYrN

npm js-yaml

Moderate

12 months ago

js-yaml has prototype pollution in merge (<<) GSA_kwCzR0hTQS1taDI5LTVoMzctZnY4bc4ABOjC

npm js-yaml

Moderate

over 7 years ago

Denial of Service in js-yaml MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTJwcjYtNzZ2Zi03NTQ2

npm js-yaml

High

over 7 years ago

Code Injection in js-yaml MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLThqOGMtN2pmaC1oNmh4

npm js-yaml

Critical

about 9 years ago

Deserialization Code Execution in js-yaml MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXh4dnctNDVycC0zbWoy

npm js-yaml

Filter by Severity

Moderate 6 High 5 Critical 1