Uncaught Exception in yaml

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Recommendation

Update the yaml package to the latest compatible version. Followings are version details:

• Affected version(s): >= 2.0.0-5, < 2.2.2
• Patched version(s): 2.2.2

References

• GHSA-f9xv-q969-pqx4
• huntr.dev
• CVE-2023-2251
• CWE-248
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Simditor XSS Vulnerability - CVE-2018-6464
• DLL Injection in kerberos - CVE-2020-13110
• Open Redirect in url-parse - CVE-2018-3774
• RSSHub SSRF vulnerability - CVE-2023-22493

Tags:

npm

yaml