| Package | Affected versions | Patched versions |
|---|---|---|
| js-yaml | < 3.13.0 | 3.13.0 |
Versions of js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Upgrade to version 3.13.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free