MAL-2025-7473 Malicious code in @crabas0npm/quam-incidunt-consequuntur-alias (npm)

The package @crabas0npm/quam-incidunt-consequuntur-alias was found to contain malicious code...

Race condition

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...

CVE-2023-47163

Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...