{"action":"Upgrade js-yaml to 3.13.0 or later.","affected":[{"fixed":"3.13.0","introduced":"0"}],"component":"js-yaml","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["3.13.0"],"ghsa_id":"GHSA-2pr6-76vf-7546","id":"tcs_01M5KETRXTYJ8PAMBWA00RX6WD","modified_at":"2021-08-04T21:32:56Z","published_at":"2019-06-05T14:35:29Z","references":["https://osv.dev/vulnerability/GHSA-2pr6-76vf-7546","https://github.com/nodeca/js-yaml/issues/475","https://github.com/nodeca/js-yaml/commit/a567ef3c6e61eb319f0bfc2671d91061afb01235","https://snyk.io/vuln/SNYK-JS-JSYAML-173999","https://www.npmjs.com/advisories/788","https://www.npmjs.com/advisories/788/versions"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-2pr6-76vf-7546","url":"https://osv.dev/vulnerability/GHSA-2pr6-76vf-7546"}],"summary":"Denial of Service in js-yaml"}