js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Your version
2.0.5
26 Apr 20132.1.3 is the newest release of 2.x.
Security
Fixes 1 advisory that affected 2.0.4
- CriticalDeserialization Code Execution in js-yamlGHSA-xxvw-45rp-3mj2 · 24 Oct 2017Fixed in 2.0.5
4 advisories affect 2.0.5; 3.15.0 fixes them
- HighCode Injection in js-yamlGHSA-8j8c-7jfh-h6hx · 4 Jun 2019Fixed in 3.13.1
- ModerateJS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliasesGHSA-h67p-54hq-rp68 · 15 Jun 2026Fixed in 3.15.0
- Moderatejs-yaml has prototype pollution in merge (<<)GHSA-mh29-5h37-fv8m · 14 Nov 2025Fixed in 3.14.2
- ModerateDenial of Service in js-yamlGHSA-2pr6-76vf-7546 · 5 Jun 2019Fixed in 3.13.0
Release note
No note was found for 2.0.5 on GitHub or in the repository's changelog.