GHSA-2PR6-76VF-7546

Denial of Service in js-yaml

Title source: GitHub Advisory
STIX 2.1 vulnerability

Description

Versions of `js-yaml` prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service. ## Recommendation Upgrade to version 3.13.0.

Description source: GitHub Advisory

Affected products and versions

1
ProductSourceVersion range

js-yaml

Browse npm / js-yaml
GitHub AdvisoryBefore 3.13.0 · Fixed in 3.13.0affected

References

5