js-yaml vulnerabilities (npm)
8 vulnerabilities.
-
js-yamlnpm js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources 7.5 High -
js-yamlnpm js-yaml: Exponential parsing time in the flow collections leads to denial of service 7.5 High -
js-yamlnpm js-yaml: YAML merge-key chains can force quadratic CPU consumption 7.5 High -
js-yamlnpm js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases 5.3 Medium -
js-yamlnpm js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
js-yamlnpm js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
js-yamlnpm js-yaml has prototype pollution in merge (<<) 5.3 Medium -
js-yamlnpm Deserialization Code Execution in js-yaml 6.8 Medium