CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550 vulnerabilities

Vulnerabilities for packages: saf, py3-jupyterlab, prism, opensearch-dashboards, lerna, eslint, langfuse, vitess, kubeflow-pipelines, tileserver-gl, thingsboard, code-server, argo-workflows, sqlpad, airflow, renovate, pulumi...