Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
nodeca/js-yaml
master @ 89024c4
3
Fixes
2
CVEs
HIGH
Peak severity
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
lib/loader.js: most-fixed (3 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Recursive YAML structures and excessive merge sequence expansions can lead to stack exhaustion or quadratic CPU processing times. Prior fixes introduced strict recursion limits and sequence length limits to mitigate these parser-level exhaustion vectors.
Remote Code Execution: Unsafe handling of custom schema tags, such as execution-privileged JavaScript function tags, allows attackers to run arbitrary code on the host environment when parsing untrusted YAML documents.
Prototype Pollution: Untrusted YAML parsing can facilitate the modification of base object prototypes, leading to logic bypasses or application crashes if property keys are not correctly sanitized during map reconstruction.