2 known vulnerabilities · 0 critical · 0 high
Deserialization Code Execution in js-yaml
js-yaml has prototype pollution in merge (<<)