TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
OpenShift Container Platform 4.22.10 security and extras update
Released 2026-08-18 · Red Hat rating Important · View on Red Hat →
js-yaml is a JavaScript YAML parser and dumper.
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.