CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550

js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml merge-key processing by repeating the same alias many times in a merge sequence. This causes quadratic parse-time behavior relative to input size an...

CVE-2026-53550 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, renovate, saf, kubeflow-pipelines, lerna, py3-jupyterlab, sqlpad, langfuse, pulumi, argo-workflows, thingsboard, prism, tileserver-gl, vitess, code-server, eslint, airflow...