Start for Free
npm

js-yaml

View on npm registry
9 Total advisories
9 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 5.3
npm

CVE-2026-59870

js-yaml: Quadratic-complexity (O(n^2)) DoS via !!omap tag in YAML11_SCHEMA
HIGH 7.5
npm

GHSA-pm4m-ph32-ghv5

js-yaml: Exponential parsing time in flow collections leads to denial of service
HIGH 7.5
npm

CVE-2026-59869

js-yaml: YAML merge-key chains can force quadratic CPU consumption
MEDIUM 5.3
npm

CVE-2026-59868

js-yaml: YAML merge-key chains can force quadratic CPU consumption in js-yaml
MEDIUM 5.3
npm

CVE-2025-64718

js-yaml has prototype pollution in merge (<<)
MEDIUM 5.3
npm

CVE-2026-53550

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
UNKNOWN
npm

CVE-2013-4660

Deserialization Code Execution in js-yaml
MEDIUM 5.9
npm

GHSA-2pr6-76vf-7546

Denial of Service in js-yaml
UNKNOWN
npm

GHSA-8j8c-7jfh-h6hx

Code Injection in js-yaml

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes