Skip to content

fix(deps): update dependency js-yaml to v4.3.1 [security] - #3137

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-npm-js-yaml-vulnerability
Open

fix(deps): update dependency js-yaml to v4.3.1 [security]#3137
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-npm-js-yaml-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Aug 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
js-yaml 4.1.1 → 4.3.1 age confidence

JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

CVE-2026-53550 / GHSA-h67p-54hq-rp68

More information

Details