@rootio/js-yaml vulnerabilities (Root)
7 vulnerabilities.
-
@rootio/js-yamlRoot AIKIDO-2026-641142 in js-yaml - Patched by Root No score -
@rootio/js-yamlRoot AIKIDO-2026-633502 in js-yaml - Patched by Root No score -
@rootio/js-yamlRoot js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources 7.5 High -
@rootio/js-yamlRoot js-yaml: Exponential parsing time in the flow collections leads to denial of service 7.5 High -
@rootio/js-yamlRoot js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
@rootio/js-yamlRoot js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
@rootio/js-yamlRoot js-yaml has prototype pollution in merge (<<) 5.3 Medium