js-yaml vulnerabilities (TuxCare)
7 vulnerabilities.
-
js-yamlTuxCare js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources 7.5 High -
js-yamlTuxCare js-yaml: Exponential parsing time in the flow collections leads to denial of service 7.5 High -
js-yamlTuxCare js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
js-yamlTuxCare js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
js-yamlTuxCare js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
js-yamlTuxCare js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
js-yamlTuxCare js-yaml has prototype pollution in merge (<<) 5.3 Medium