tocsin

Debian/node-js-yaml: high 7.5

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 until 3.15.2, 4.3.2, and 5.4.1, maxTotalMergeKeys in lib/js-yaml/loader.js and lib/loader.js does not count empty mapping sources while proce

Action: Upgrade node-js-yaml to 4.3.2+~4.0.9-1 or later.

Affected

introducedfixedlast affected
04.3.2+~4.0.9-1-

Fixed versions

4.3.2+~4.0.9-1

Sources

published · modified · JSON