CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550 vulnerabilities

Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, vitess, sqlpad, airflow, kubeflow-katib, pulumi, tileserver-gl, renovate, saf, kubeflow-pipelines, eslint, lerna, langfuse, ts-patch, prism, code-server, argo-workflows, thingsboard...

02.aula (=1.0.0), 0xsodium (>=0.2.0 <=0.14.0) +11476 more potentially affected by CVE-2026-53550 via js-yaml (>=4.0.0 <=4.1.1)

js-yaml NPM version =4.0.0, =0.2.0, =0.0.3, =4.11.0, =0.0.1, =1.1.9, =0.1.23, =0.1.4, =6.1.5, =0.2.0, =0.2.0, =0.14.0 - @10abdullahbutt/nestjs-boilerplate =0.0.1 and more Source cves: CVE-2026-53550 Source advisory: OSV:GHSA-H67P-54HQ-RP68...