CVE-2026-59868

creationtimestamp| type| source ---|---|--- 2026-07-10 23:59:16+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqde5mvdyk2d 2026-07-20 22:37:26+00:00| published-proof-of-concept| https://github.com/nodeca/js-yaml/security/advisories/GHSA-g796-fgmg-93mv...

CVE-2026-59868

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. When merge keys are enabled, a remote attacker could exploit this vulnerability by crafting a YAML document where a chain of mappings uses merge keys, each merging the previous one. This can lead to a significant increase in CPU ti...