npm/js-yaml: high
Code Injection in js-yaml
Action: Upgrade js-yaml to 3.13.1 or later.
npm i js-yaml@3.13.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.13.1 | - |
Fixed versions
| 3.13.1 |
Sources
- osv: GHSA-8j8c-7jfh-h6hx
- https://github.com/nodeca/js-yaml/pull/480
- https://github.com/nodeca/js-yaml/pull/480/commits/e18afbf1edcafb7add2c4c7b22abc8d6ebc2fa61
- https://www.npmjs.com/advisories/813
published · modified · JSON