Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Mazze93

#21046of 60,587
15Total CVSS
Vulnerabilities · 2
High
2
PT-2026-56489
2026-07-08
7.5
CVE-2026-59868
Npm
Js-Yaml
When merge keys are enabled, the software is susceptible to a Denial of Service (DoS) due to algorithmic complexity. Specifically, the parser can spend quadratic CPU time processing a document that grows only linearly in size. This occurs when a chain of mappings is used where each mapping merges the previous one, forcing the loader to enumerate inherited keys repeatedly. This results in O(N^2) work for an O(N) input size.
PT-2026-56490
2026-07-08
7.5
CVE-2026-59869
Npm
Js-Yaml
js-yaml can consume quadratic CPU time when parsing a document that grows linearly in size. This occurs when a chain of mappings utilizes merge keys, where each subsequent mapping merges the previous one.