nodejs-js-yaml vulnerabilities (openEuler)

2 vulnerabilities.

• nodejs-js-yaml openEuler js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources CVE-2026-84375 Fix available 7.5 HighAugust 4, 2026
• nodejs-js-yaml openEuler js-yaml has prototype pollution in merge (<<) CVE-2025-64718 Fix available 5.3 MediumJune 4, 2019