Skip to content

Update js-yaml to latest version(5.4.2) to fix CVE - #1806

Open
KoenDG wants to merge 1 commit into
gruntjs:mainfrom
KoenDG:cve_fix
Open

KoenDG wants to merge 1 commit into
gruntjs:mainfrom
KoenDG:cve_fix

Conversation

@KoenDG

@KoenDG KoenDG commented Sep 20, 2026

Copy link
Copy Markdown

Update js-yaml to 5.4.2 to fix CVE https://nvd.nist.gov/vuln/detail/cve-2026-84375

Update to version 4: https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md#400---2021-01-03

Related changes:

  • Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.

Update to version 5: https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md#500---2026-06-20

Related changes:

  • Removed deprecated safeLoad(), safeLoadAll() and safeDump() exports.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant