js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Your version
5.5.0 is the newest release of 5.x.
In short
4 fixed
Security
1 advisory affects 5.2.3; 5.4.1 fixes them
- Moderatejs-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesGHSA-r3ph-w7gj-g6xm · 29 Sep 2026Fixed in 5.4.1
Release note
Fixed
Prevent prototype fallback when resolving tags and mapping entries, #782.
Resolve
!!timestampyears 0000-0099 correctly, #775.Preserve implicit null mapping values before document markers and reject
unpaired mapping event streams, #784.Preserve folded scalar values with tab-indented lines when round-tripping a
parsed AST throughpresent();dump()and loading are unaffected, #780.