Skip to content
OpenAdvisories

Package · Debian

node-yaml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.3
    CVE-2026-33532 Public exploit

    yaml is vulnerable to Stack Overflow via deeply nested YAML collections

    `yaml` is a YAML parser and serialiser for JavaScript. Parsing a YAML document with a version of `yaml` on the 1.x branch prior to 1.10.3 or on the 2.x branch prior to 2.8.3 may throw a RangeError due to a stack overflow. The node resolution/composition phase…

    eemeli yaml node-yaml yaml Debian Ubuntu npm
  • High 7.5
    CVE-2023-2251

    Uncaught Exception in eemeli/yaml

    Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5.

    eemeli eemeli/yaml yaml node-yaml Debian Ubuntu npm