You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
WS-2019-0032 - Medium Severity Vulnerability
YAML 1.2 parser and serializer
path: /tmp/git/react-material-webpack-boiler/node_modules/postcss-svgo/node_modules/js-yaml/package.json
Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.7.0.tgz
Dependency Hierarchy:
Found in HEAD commit: 33b3f5702d5db3b85059ac03c0021f5c6bb8c81d
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Publish Date: 2019-03-26
URL: WS-2019-0032
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/788/versions
Release Date: 2019-03-26
Fix Resolution: 3.13.0
Step up your Open Source Security Game with WhiteSource here
The text was updated successfully, but these errors were encountered: