CVE-2026-53550
1 advisory.
npm/js-yaml CVE-2026-53550: medium 5.3, EPSS 0.41%
JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
Action: Upgrade js-yaml to 3.15.0 or later.
npm i js-yaml@4.2.0npm i js-yaml@3.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.2.0 | - |
| 0 | 3.15.0 | - |
Fixed versions
| 4.2.0 | 3.15.0 |
Sources
- osv: GHSA-h67p-54hq-rp68
- https://github.com/nodeca/js-yaml/security/advisories/GHSA-h67p-54hq-rp68
- https://nvd.nist.gov/vuln/detail/CVE-2026-53550
- https://github.com/nodeca/js-yaml
CVE-2026-53550 · published · modified · JSON