AZL-92192
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92192.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-92192
- Upstream
- Published
- 2026-07-08T16:16:33Z
- Modified
- 2026-08-31T05:26:07Z
- Summary
- CVE-2026-59869 affecting package js-jquery 3.5.0-4
- Details
-
js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.
- References