CVE-2026-59868Medium· 5.3▾ Sunlitjs-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where e…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.6%
js-yaml is a JavaScript YAML parser and dumper. From 5.0.0 before 5.2.0, when merge keys are enabled, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in version 5.2.0.
js-yaml >= 5.0.0, < 5.2.0Upgrade past the affected range:
js-yaml 5.2.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-59870High· 7.5js-yaml is a JavaScript YAML parser and dumper
CVE-2026-84375High· 7.5js-yaml is a JavaScript YAML parser and dumper
CVE-2026-73643High· 7.5js-yaml is a JavaScript YAML parser and dumper
CVE-2026-54284High· 7.5sqlparse is a non-validating SQL parser module for Python
CVE-2026-53550Medium· 5.3js-yaml: js-yaml: Denial of Service via crafted YAML merge keys (CVE-2026-53550)
CVE-2026-104861High· 7.5probe-image-size gets image dimensions without downloading the entire file