You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 7, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
Jul 7, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 7, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
Jul 7, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 7, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
Jul 8, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 8, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
Jul 8, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 8, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
Jul 8, 2021
mend-for-github-combot
changed the title
WS-2019-0032 (Medium) detected in js-yaml-3.5.5.tgz, js-yaml-3.6.1.tgz
WS-2019-0032 (Medium) detected in js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
Jul 13, 2021
WS-2019-0032 - Medium Severity Vulnerability
Vulnerable Libraries - js-yaml-3.6.1.tgz, js-yaml-3.5.5.tgz
js-yaml-3.6.1.tgz
YAML 1.2 parser and serializer
Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz
Path to dependency file: NodeGoat/package.json
Path to vulnerable library: NodeGoat/node_modules/coveralls/node_modules/js-yaml/package.json
Dependency Hierarchy:
js-yaml-3.5.5.tgz
YAML 1.2 parser and serializer
Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.5.5.tgz
Path to dependency file: NodeGoat/package.json
Path to vulnerable library: NodeGoat/node_modules/js-yaml/package.json
Dependency Hierarchy:
Found in HEAD commit: d4439588ceae22fa05afef2155f4ec9819386fcf
Vulnerability Details
Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.
Publish Date: 2019-03-20
URL: WS-2019-0032
CVSS 2 Score Details (5.0)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/788/versions
Release Date: 2019-03-20
Fix Resolution: js-yaml - 3.13.0
The text was updated successfully, but these errors were encountered: