js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Upgrading js-yaml from 1.0.0 to 1.0.3
3 releases in betweennotes for 2
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- 3+
- fixes
Counted from 2 of 3 release notes. Advisories are counted from the advisory database, in full.
Security
5 advisories still affect 1.0.3
- js-yaml has prototype pollution in merge (<<)moderate · GHSA-mh29-5h37-fv8m
- Deserialization Code Execution in js-yamlcritical · GHSA-xxvw-45rp-3mj2
- Denial of Service in js-yamlmoderate · GHSA-2pr6-76vf-7546
Upgrading to 3.15.0 clears them.
Release by release
- fixed
Fixed utf-8 files loading.
- fixed
- fixed
Pull out hand-written shims. Use ES5-Shims for old browsers support. See #44.
- fixed
Fix timstamps incorectly parsed in local time when no time part specified.
- fixed
1.0.1no release note