Repository navigation

CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources in openam-ui-api (4.3.1 -> 4.3.2) - #1132

Merged

vharseko merged 1 commit into

OpenIdentityPlatform:masterfrom

vharseko:fix/cve-2026-84375-js-yaml-api

Sep 17, 2026

Commits on Sep 17, 2026

CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources in openam-ui-api (4.3.1 -> 4.3.2)
vharseko
committed
1cbef24