Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-2251: fix: Corner case failure in error pretty-printer · eemeli/yaml@984f578

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.2.2.

CVE
#git

@@ -341,6 +341,12 @@ describe('pretty errors’, () => {

const doc = YAML.parseDocument(src, { prettyErrors: true })

expect(doc.warnings).toMatchObject([{ name: ‘YAMLWarning’ }])

})

test('repeated CR’, () => {

const src = '[' + '\r’.repeat(80)

const doc = YAML.parseDocument(src, { prettyErrors: true })

expect(doc.errors[0]).not.toHaveProperty(‘source’)

})

})

describe('tags on invalid nodes’, () => {

Related news

GHSA-f9xv-q969-pqx4: Uncaught Exception in yaml

Uncaught Exception in GitHub repository eemeli/yaml prior to 2.2.2.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda