DoS (Denial of Service) js-yaml Dependency in Bitbucket Data Center

🗓️ 11 Aug 2026 11:30:42Reported by security-metrics-botType

js-yaml dependency in Bitbucket Data Center causes unauthenticated DoS via quadratic CPU parsing of merge keys.

Reporter	Title	Published	Views	Family All 423
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in Java, JavaScript and IBM WebSphere Application Server Liberty	28 Aug 202610:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.	27 Aug 202619:42	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub	27 Aug 202619:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869	10 Aug 202611:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.	1 Sep 202618:47	–	ibm
ATTACKERKB	CVE-2026-59869	8 Jul 202615:15	–	attackerkb
Chainguard	CVE-2026-59869 vulnerabilities	21 Jul 202614:17	–	cgr