You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
WS-2019-0032 - Medium Severity Vulnerability
YAML 1.2 parser and serializer
path: /tmp/git/uBoss/node_modules/js-yaml/package.json
Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.2.tgz
Dependency Hierarchy:
Found in HEAD commit: 7e570c8c7d27e2e1f27e9eb4f3cde336881a3acb
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Publish Date: 2019-03-26
URL: WS-2019-0032
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/788/versions
Release Date: 2019-03-26
Fix Resolution: 3.13.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: