js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Upgrading js-yaml from 5.2.2 to 5.2.3
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 4
- fixes
Security
1 advisory still affects 5.2.3
- js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesmoderate · GHSA-r3ph-w7gj-g6xm
Upgrading to 5.4.1 clears it.
Release by release
- fixed
Prevent prototype fallback when resolving tags and mapping entries, #782.
- fixed
Resolve
!!timestampyears 0000-0099 correctly, #775. - fixed
Preserve implicit null mapping values before document markers and reject unpaired mapping event streams, #784.
- fixed
Preserve folded scalar values with tab-indented lines when round-tripping a parsed AST through
present();dump()and loading are unaffected, #780.
- fixed