CVE-2026-59868

creationtimestamp| type| source ---|---|--- 2026-07-10 23:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqde5mvdyk2d...

CVE-2026-59868

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. When merge keys are enabled, a remote attacker could exploit this vulnerability by crafting a YAML document where a chain of mappings uses merge keys, each merging the previous one. This can lead to a significant increase in CPU ti...