MAL-2025-7473 Malicious code in @crabas0npm/quam-incidunt-consequuntur-alias (npm)

The package @crabas0npm/quam-incidunt-consequuntur-alias was found to contain malicious code...

CVE-2023-47163

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...

Race condition

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...