Uncaught Exception in yaml

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Recommendation

Update the yaml package to the latest compatible version. Followings are version details:

• Affected version(s): >= 2.0.0-5, < 2.2.2
• Patched version(s): 2.2.2

References

• GHSA-f9xv-q969-pqx4
• huntr.dev
• CVE-2023-2251
• CWE-248
• CAPEC-310
• OWASP 2021-A6

Related Issues

• engine.io Uncaught Exception vulnerability - CVE-2023-31125
• fastify/websocket vulnerable to uncaught exception via crash on malformed packet - CVE-2022-39386
• Uncaught exception in engine.io - CVE-2022-41940
• Uncaught Exception in engine.io - engine.io - CVE-2022-21676

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

yaml