js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Your version
4.3.1
31 Jul 20264.3.2 is the newest release of 4.x.
Security
Fixes 1 advisory that affected 4.3.0
- HighJS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backportedGHSA-5p4m-2wfm-xmqj · 6 Aug 2026Fixed in 4.3.1
1 advisory affects 4.3.1; 4.3.2 fixes them
- Highjs-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesGHSA-2883-xcg3-v3hh · 8 Sep 2026Fixed in 4.3.2
Release note
No note was found for 4.3.1 on GitHub or in the repository's changelog.