Fix debricked–149699

[debricked-staging]

debricked–149699

Vulnerable dependency:     js-yaml (Yarn)    3.12.0

Vulnerable dependency:     js-yaml (npm)    3.12.0

Vulnerability details

Description

GitHub

Code Injection in js-yaml

Versions of js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file. Objects that have toString as key, JavaScript code as value and are used as explicit mapping keys allow attackers to execute the supplied code through the load() function. The safeLoad() function is unaffected.

An example payload is
{ toString: !<tag:yaml.org,2002:js/function> 'function (){return Date.now()}' } : 1
which returns the object
{
"1553107949161": 1
}

Recommendation

Upgrade to version 3.13.1.

CVSS details

    No information

References

    Code Injection in js-yaml · GHSA-8j8c-7jfh-h6hx · GitHub Advisory Database · GitHub
    Fix possible code execution in (already unsafe) load() by rlidwka · Pull Request #480 · nodeca/js-yaml · GitHub

 

Related information

📌 Remember! Check the changes to ensure they don't introduce any breaking changes.
📚 Read more about the CVE