package

npm / js-yaml

pkg:npm/js-yaml

MEDIUM 5.9 npm

Denial of Service in js-yaml

Modified: 8/4/2021

HIGH npm

Code Injection in js-yaml

Modified: 8/31/2020

MEDIUM 5.3 npm

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

Modified: 6/15/2026

MEDIUM 5.3 npm

js-yaml has prototype pollution in merge (<<)

Modified: 2/4/2026

CRITICAL npm

Deserialization Code Execution in js-yaml

Modified: 11/8/2023