Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-59869 js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a … Js Yaml 3.15.0 / 4.3.0+ Fix from $1,9502026-07-08 HIGH 7.5 CVE-2026-59868 js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a … Js Yaml 5.2.0+ Fix from $1,9502026-07-08 HIGH 7.5 CVE-2026-59870 js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses om… Js Yaml 5.2.1+ Fix from $1,9502026-07-08 MEDIUM 5.3 CVE-2026-53550 js-yaml is a JavaScript YAML parser and dumper. Prior to 4.2.0 and 3.15.0, a crafted YAML document can trigger algorithmic CPU exhaustion in js-yaml … Js Yaml 3.15.0 / 4.2.0+ Fix from $1,6002026-06-22 MEDIUM 5.3 CVE-2025-64718 js-yaml is a JavaScript YAML parser and dumper. In js-yaml before 4.1.1 and 3.14.2, it's possible for an attacker to modify the prototype of the resu… Js Yaml 3.14.2 / 4.1.1+ Fix from $1,6002025-11-13 MEDIUM 6.8 CVE-2013-4660EPSS 17% The JS-YAML module before 2.0.5 for Node.js parses input without properly considering the unsafe !!js/function tag, which allows remote attackers to … Js Yaml after 2.0.4 Fix from $1,6002013-06-28