Uncaught Exception in yaml

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Recommendation

Update the yaml package to the latest compatible version. Followings are version details:

• Affected version(s): >= 2.0.0-5, < 2.2.2
• Patched version(s): 2.2.2

References

• GHSA-f9xv-q969-pqx4
• huntr.dev
• CVE-2023-2251
• CWE-248
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Server-Side Request Forgery in Request - CVE-2023-28155
• Follow Redirects improperly handles URLs in the url.parse() function - CVE-2023-26159
• PostCSS line return parsing error - CVE-2023-44270
• angular vulnerable to regular expression denial of service via the angular.copy() utility - CVE-2023-26116

Tags:

npm

yaml