node-js-yaml vulnerabilities (Ubuntu)
7 vulnerabilities.
-
node-js-yamlUbuntu js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources 7.5 High -
node-js-yamlUbuntu js-yaml: Exponential parsing time in the flow collections leads to denial of service 7.5 High -
node-js-yamlUbuntu js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
node-js-yamlUbuntu js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
node-js-yamlUbuntu js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
node-js-yamlUbuntu js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
node-js-yamlUbuntu js-yaml has prototype pollution in merge (<<) 5.3 Medium