GitHub Advisoryadvisory · npm

GHSA-f9xv-q969-pqx4 Uncaught Exception in yaml

HIGH Published 2023-04-24 Modified 2023-05-03 Official page ↗

Aliases: CVE-2023-2251
Ecosystem: npm
Packages: yaml
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-248
Reviewed: 2023-04-24

Affected packages

• npm yaml: >= 2.0.0-5, < 2.2.2 → fixed in 2.2.2

Description

Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2.

Related

Alias · CVE (1)

CVE-2023-2251 Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5. vulnerability

Weakness · CWE (1)

CWE-248 Uncaught Exception weakness

References