js-yaml
5.5.0 · 15 Oct 2026MIT322.7M / weekRepositoryHomepagenpmAtom feed
Upgrading js-yaml from 5.4.0 to 5.4.1
1 release in betweenevery note read
Other targets from 5.4.0Newest 5.x, Latest5.5.0
- 0
- changes to make
- 1
- advisory fixed
- 0
- new
- 0
- fixes
Security
Fixes 1 advisory affecting 5.4.0
- js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesmoderate · GHSA-r3ph-w7gj-g6xm
- 5.4.1
Count empty mappings in merge sequences toward
maxTotalMergeKeysto limit CPU usage, #797.
1 other line we could not sort, mostly version bumps
- 5.4.1
Hard-limit merge sequence size to 100.