node-js-yaml vulnerabilities (Debian)
4 vulnerabilities.
-
node-js-yamlDebian js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources 7.5 High -
node-js-yamlDebian js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
node-js-yamlDebian js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
node-js-yamlDebian js-yaml has prototype pollution in merge (<<) 5.3 Medium