tocsin

Debian/node-js-yaml: high 7.5

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chai

Action: Upgrade node-js-yaml to 4.2.0+~4.0.9-2 or later.

Affected

introducedfixedlast affected
04.2.0+~4.0.9-2-

Fixed versions

4.2.0+~4.0.9-2

Sources

published · modified · JSON