nodeca vulnerabilities

probe-image-size: Quadratic-time Denial of Service in the SVG Parser

nodeca · probe-image-size

js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources

nodeca · js-yaml

js-yaml: Exponential parsing time in the flow collections leads to denial of service

nodeca · js-yaml

js-yaml: YAML merge-key chains can force quadratic CPU consumption

nodeca · js-yaml

js-yaml: YAML merge-key chains can force quadratic CPU consumption

nodeca · js-yaml

js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing

nodeca · js-yaml

js-yaml: Quadratic-complexity DoS in merge key handling via repeated aliases

nodeca · js-yaml

js-yaml has prototype pollution in merge (<<)

nodeca · js-yaml