01 Record

CVE-2026-73643

js-yaml: Exponential parsing time in the flow collections leads to denial of service

HighPUBLISHEDCNA: GitHub_M

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

02 Description

js-yaml: Exponential parsing time in the flow collections leads to denial of service

Published: 2026-08-13 17:47Z1 DAY AGO
Last updated: 2026-08-14 16:44Z1 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 7.5)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-407
SSVC decision: ExploitationpocAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: a7c48829ba316a16f8424309c1fce1473f97944864549db4d6aa762d243d808b

VendorProductVersionsPlatforms

nodecajs-yaml>= 5.0.0, < 5.2.2—