tocsin

npm/js-yaml: high 7.5

JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported

Action: Upgrade js-yaml to 3.15.1 or later.

npm i js-yaml@4.3.1
npm i js-yaml@3.15.1

Affected

introducedfixedlast affected
4.0.04.3.1-
3.0.03.15.1-

Fixed versions

4.3.13.15.1

Sources

published · modified · JSON