Red Hat Single Sign-On 7/js-yaml
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases | js-yamlCryostat 4/cryostat-openshift-console-plugin-npm | npmRed Hat | Medium | Fix reported | |
| js-yaml: YAML merge-key chains can force quadratic CPU consumption | js-yamlCryostat 4/grafana-infinity-datasource-npm | npmRed Hat | High | Fix reported | |
| js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources | js-yamlAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 | npmRed Hat | High | Fix reported |