Published Sep 8, 2026
CVSS
HIGH
EPSS
Affected packages
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources