Skip to content
Threat Feed
Subscribe

Product

Js-Yaml

1 brief RSS
medium threat

CVE-2026-59869: js-yaml Vulnerability Leading to Quadratic CPU Consumption and DoS

A vulnerability, CVE-2026-59869, in the `js-yaml` library allows attackers to craft malicious YAML merge-key chains, which can lead to quadratic CPU consumption and a Denial of Service condition in applications processing the input.

exploited js-yaml denial-of-service vulnerability yaml
2t 1c