Uncaught Exception in yaml

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Recommendation

Update the yaml package to the latest compatible version. Followings are version details:

• Affected version(s): >= 2.0.0-5, < 2.2.2
• Patched version(s): 2.2.2

References

• GHSA-f9xv-q969-pqx4
• huntr.dev
• CVE-2023-2251
• CWE-248
• CAPEC-310
• OWASP 2021-A6

Related Issues

• crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard - CVE-2023-46233
• Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation - CVE-2026-2229
• fast-xml-parser vulnerable to Regex Injection via Doctype Entities - CVE-2023-34104
• plotly.js prototype pollution vulnerability - CVE-2023-46308

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

yaml