We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weβll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Node.js JavaScript runtime β¨π’πβ¨
Library home page: https://github.com/nodejs/node.git
Found in HEAD commit: 372eb3b419d838f14a0bc4a628e2e1b41d27f501
Found in base branch: develop
Js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file.
Publish Date: 2019-04-05
URL: WS-2019-0063
Base Score Metrics not available
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/813
Release Date: 2019-04-05
Fix Resolution: js-yaml - 3.13.1
The text was updated successfully, but these errors were encountered:
No branches or pull requests
WS-2019-0063 - High Severity Vulnerability
Vulnerable Library - nodev6.10.3
Node.js JavaScript runtime β¨π’πβ¨
Library home page: https://github.com/nodejs/node.git
Found in HEAD commit: 372eb3b419d838f14a0bc4a628e2e1b41d27f501
Found in base branch: develop
Vulnerable Source Files (0)
Vulnerability Details
Js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file.
Publish Date: 2019-04-05
URL: WS-2019-0063
CVSS 2 Score Details (8.0)
Base Score Metrics not available
Suggested Fix
Type: Upgrade version
Origin: https://www.npmjs.com/advisories/813
Release Date: 2019-04-05
Fix Resolution: js-yaml - 3.13.1
The text was updated successfully, but these errors were encountered: