Changes Scan Docs Trust

← All changes

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

js-yaml (npm) · Teire

Changes Scan Docs Trust

js-yaml

npm

latest 5.5.0 · 2026-10-15www.npmjs.com · all 93 versions

Security advisories5

js-yaml: js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesfixed in 4.3.2, 3.15.2
js-yaml: js-yaml: YAML merge-key chains can force quadratic CPU consumptionfixed in 3.15.0, 4.3.0
js-yaml: JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backportedfixed in 4.3.1, 3.15.1
js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliasesfixed in 4.2.0, 3.15.0
js-yaml: js-yaml has prototype pollution in merge (<<)fixed in 4.1.1, 3.14.2

Versions that change something

3.14.22025-11fixes 1 advisory
3.15.02026-06fixes 2 advisories
3.15.12026-07fixes 1 advisory
3.15.22026-08fixes 1 advisory

4.1.1

2025-11

fixes 1 advisory

4.2.02026-05fixes 1 advisory

4.3.02026-06fixes 1 advisory

4.3.12026-07fixes 1 advisory

4.3.22026-08fixes 1 advisory