JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases #189

Open
opened 2026-06-17 19:36:07 +00:00 by LongBu · 0 comments
LongBu commented 2026-06-17 19:36:07 +00:00 (Migrated from github.com)

Hi there,

Please see the following for further details as currently js-yaml is set to ^3.13.1: https://github.com/advisories/GHSA-h67p-54hq-rp68 Thank you for your time!

Hi there, Please see the following for further details as currently js-yaml is set to ^3.13.1: https://github.com/advisories/GHSA-h67p-54hq-rp68 Thank you for your time!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rtlabs-llm-agents/gms-gray-matter#189
No description provided.