ROOT-APP-NPM-CVE-2026-59869 CVE-2026-59869 in @rootio/js-yaml - Patched by Root

Root has patched CVE-2026-59869 in the @rootio/js-yaml package for Root:npm. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.1-2.1.hum1 aarch64, x8664 nodejs22-bin-22.23.1-2.1.hum1 noarch nodejs22-devel-22.23.1-2.1.hum1 aarch64, x8664 nodejs22-docs-22.23.1-2.1.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.0-0.3.hum1 aarch64, x8664 nodejs24-bin-24.18.0-0.3.hum1 noarch nodejs24-devel-24.18.0-0.3.hum1 aarch64, x8664 nodejs24-docs-24.18.0-0.3.hum1 noarch...

CVE-2026-59869

creationtimestamp| type| source ---|---|--- 2026-07-11 00:05:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdej46erx2a 2026-07-20 22:37:28+00:00| published-proof-of-concept| https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.4.0-1.4.hum1 aarch64, x8664 nodejs26-bin-26.4.0-1.4.hum1 noarch nodejs26-devel-26.4.0-1.4.hum1 aarch64, x8664 nodejs26-docs-26.4.0-1.4.hum1 noarch...

Linux Distros Unpatched Vulnerability : CVE-2026-59869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js- yaml can spend quadratic CPU time parsing a document...

UBUNTU-CVE-2026-59869

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in...