tocsin

Debian/node-js-yaml: medium 5.3

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing (<<) by repeating the same ali

Action: Upgrade node-js-yaml to 4.2.0+~4.0.9-1 or later.

Affected

introducedfixedlast affected
04.2.0+~4.0.9-1-

Fixed versions

4.2.0+~4.0.9-1

Sources

published · modified · JSON