Uncaught Exception in yaml

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Recommendation

Update the yaml package to the latest compatible version. Followings are version details:

• Affected version(s): >= 2.0.0-5, < 2.2.2
• Patched version(s): 2.2.2

References

• GHSA-f9xv-q969-pqx4
• huntr.dev
• CVE-2023-2251
• CWE-248
• CAPEC-310
• OWASP 2021-A6

Related Issues

• FUXA SQL Injection vulnerability (GHSA-p46g-8c3q-89p2) - CVE-2023-31719
• static-server Path Traversal vulnerability - CVE-2023-26152
• Froala Editor Cross-site Scripting vulnerability - CVE-2023-41592
• angular vulnerable to regular expression denial of service via the <input type="url"> element - CVE-2023-26118

Tags:

npm

yaml