Debian/node-yaml: medium 4.3
`yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due
Action: Upgrade node-yaml to 2.8.3+~cs0.4.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.8.3+~cs0.4.0-1 | - |
Fixed versions
| 2.8.3+~cs0.4.0-1 |
Sources
- osv: DEBIAN-CVE-2026-33532#Debian:14/node-yaml
- https://security-tracker.debian.org/tracker/CVE-2026-33532
published · modified · JSON