Описание
Denial of Service in js-yaml
Versions of js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Recommendation
Upgrade to version 3.13.0.
Пакеты
Наименование
js-yaml
npm
Затронутые версииВерсия исправления
< 3.13.0
3.13.0
5.9 Medium
CVSS3
Дефекты
CWE-400
5.9 Medium
CVSS3
Дефекты
CWE-400