OsVault/npm/js-yaml
npm

js-yaml

3 known vulnerabilities · 0 critical · 0 high

CVE-2013-4660MEDIUM

Deserialization Code Execution in js-yaml

Published Oct 24, 2017
CVE-2025-64718

js-yaml has prototype pollution in merge (<<)

Published Nov 14, 2025
GHSA-h67p-54hq-rp68

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

Published Jun 15, 2026
Check your entire dependency tree at onceRun dependency scan →