Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-59869

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 27.1%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-59869
  • Nodeca » Js-Yaml » Version: 3.0.0
    cpe:2.3:a:nodeca:js-yaml:3.0.0
  • Nodeca » Js-Yaml » Version: 3.0.1
    cpe:2.3:a:nodeca:js-yaml:3.0.1
  • Nodeca » Js-Yaml » Version: 3.0.2
    cpe:2.3:a:nodeca:js-yaml:3.0.2
  • Nodeca » Js-Yaml » Version: 3.1.0
    cpe:2.3:a:nodeca:js-yaml:3.1.0
  • Nodeca » Js-Yaml » Version: 3.10.0
    cpe:2.3:a:nodeca:js-yaml:3.10.0
  • Nodeca » Js-Yaml » Version: 3.11.0
    cpe:2.3:a:nodeca:js-yaml:3.11.0
  • Nodeca » Js-Yaml » Version: 3.12.0
    cpe:2.3:a:nodeca:js-yaml:3.12.0
  • Nodeca » Js-Yaml » Version: 3.12.1
    cpe:2.3:a:nodeca:js-yaml:3.12.1
  • Nodeca » Js-Yaml » Version: 3.12.2
    cpe:2.3:a:nodeca:js-yaml:3.12.2
  • Nodeca » Js-Yaml » Version: 3.13.0
    cpe:2.3:a:nodeca:js-yaml:3.13.0
  • Nodeca » Js-Yaml » Version: 3.13.1
    cpe:2.3:a:nodeca:js-yaml:3.13.1
  • Nodeca » Js-Yaml » Version: 3.14.0
    cpe:2.3:a:nodeca:js-yaml:3.14.0
  • Nodeca » Js-Yaml » Version: 3.14.1
    cpe:2.3:a:nodeca:js-yaml:3.14.1
  • Nodeca » Js-Yaml » Version: 3.14.2
    cpe:2.3:a:nodeca:js-yaml:3.14.2
  • Nodeca » Js-Yaml » Version: 3.2.0
    cpe:2.3:a:nodeca:js-yaml:3.2.0
  • Nodeca » Js-Yaml » Version: 3.2.1
    cpe:2.3:a:nodeca:js-yaml:3.2.1
  • Nodeca » Js-Yaml » Version: 3.2.2
    cpe:2.3:a:nodeca:js-yaml:3.2.2
  • Nodeca » Js-Yaml » Version: 3.2.3
    cpe:2.3:a:nodeca:js-yaml:3.2.3
  • Nodeca » Js-Yaml » Version: 3.2.4
    cpe:2.3:a:nodeca:js-yaml:3.2.4
  • Nodeca » Js-Yaml » Version: 3.2.5
    cpe:2.3:a:nodeca:js-yaml:3.2.5
  • Nodeca » Js-Yaml » Version: 3.2.6
    cpe:2.3:a:nodeca:js-yaml:3.2.6
  • Nodeca » Js-Yaml » Version: 3.2.7
    cpe:2.3:a:nodeca:js-yaml:3.2.7
  • Nodeca » Js-Yaml » Version: 3.3.0
    cpe:2.3:a:nodeca:js-yaml:3.3.0
  • Nodeca » Js-Yaml » Version: 3.3.1
    cpe:2.3:a:nodeca:js-yaml:3.3.1
  • Nodeca » Js-Yaml » Version: 3.4.0
    cpe:2.3:a:nodeca:js-yaml:3.4.0
  • Nodeca » Js-Yaml » Version: 3.4.1
    cpe:2.3:a:nodeca:js-yaml:3.4.1
  • Nodeca » Js-Yaml » Version: 3.4.2
    cpe:2.3:a:nodeca:js-yaml:3.4.2
  • Nodeca » Js-Yaml » Version: 3.4.3
    cpe:2.3:a:nodeca:js-yaml:3.4.3
  • Nodeca » Js-Yaml » Version: 3.4.4
    cpe:2.3:a:nodeca:js-yaml:3.4.4
  • Nodeca » Js-Yaml » Version: 3.4.5
    cpe:2.3:a:nodeca:js-yaml:3.4.5
  • Nodeca » Js-Yaml » Version: 3.4.6
    cpe:2.3:a:nodeca:js-yaml:3.4.6
  • Nodeca » Js-Yaml » Version: 3.5.0
    cpe:2.3:a:nodeca:js-yaml:3.5.0
  • Nodeca » Js-Yaml » Version: 3.5.1
    cpe:2.3:a:nodeca:js-yaml:3.5.1
  • Nodeca » Js-Yaml » Version: 3.5.2
    cpe:2.3:a:nodeca:js-yaml:3.5.2
  • Nodeca » Js-Yaml » Version: 3.5.3
    cpe:2.3:a:nodeca:js-yaml:3.5.3
  • Nodeca » Js-Yaml » Version: 3.5.4
    cpe:2.3:a:nodeca:js-yaml:3.5.4
  • Nodeca » Js-Yaml » Version: 3.5.5
    cpe:2.3:a:nodeca:js-yaml:3.5.5
  • Nodeca » Js-Yaml » Version: 3.6.0
    cpe:2.3:a:nodeca:js-yaml:3.6.0
  • Nodeca » Js-Yaml » Version: 3.6.1
    cpe:2.3:a:nodeca:js-yaml:3.6.1
  • Nodeca » Js-Yaml » Version: 3.7.0
    cpe:2.3:a:nodeca:js-yaml:3.7.0
  • Nodeca » Js-Yaml » Version: 3.8.0
    cpe:2.3:a:nodeca:js-yaml:3.8.0
  • Nodeca » Js-Yaml » Version: 3.8.1
    cpe:2.3:a:nodeca:js-yaml:3.8.1
  • Nodeca » Js-Yaml » Version: 3.8.2
    cpe:2.3:a:nodeca:js-yaml:3.8.2
  • Nodeca » Js-Yaml » Version: 3.8.3
    cpe:2.3:a:nodeca:js-yaml:3.8.3
  • Nodeca » Js-Yaml » Version: 3.8.4
    cpe:2.3:a:nodeca:js-yaml:3.8.4
  • Nodeca » Js-Yaml » Version: 3.9.0
    cpe:2.3:a:nodeca:js-yaml:3.9.0
  • Nodeca » Js-Yaml » Version: 3.9.1
    cpe:2.3:a:nodeca:js-yaml:3.9.1
  • Nodeca » Js-Yaml » Version: 4.0.0
    cpe:2.3:a:nodeca:js-yaml:4.0.0
  • Nodeca » Js-Yaml » Version: 4.1.0
    cpe:2.3:a:nodeca:js-yaml:4.1.0
  • Nodeca » Js-Yaml » Version: 4.1.1
    cpe:2.3:a:nodeca:js-yaml:4.1.1
  • Nodeca » Js-Yaml » Version: 4.2.0
    cpe:2.3:a:nodeca:js-yaml:4.2.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved