[FOLIO-2080] Fix security vulnerability reported for js-yaml < 3.13.1 - FOLIO Issue Tracker

XML

Word

Printable

Remediation

Upgrade js-yaml to version 3.13.1 or later. For example:

js-yaml@^3.13.1:
 version "3.13.1"

Always verify the validity and compatibility of suggestions with your codebase.

WS-2019-0063
high severity
Vulnerable versions: < 3.13.1
Patched version: 3.13.1

Js-yaml prior to 3.13.1 are vulnerable to Code Injection. The load() function may execute arbitrary code injected through a malicious YAML file.

is blocked by

FOLIO-2083 Fix security vulnerability reported for js-yaml < 3.13.1

UINOTES-35 Fix security vulnerability reported for js-yaml < 3.13.1

relates to

FOLIO-2213 In folio-install kubernetes-rancher: Fix security vulnerability for js-yaml and various lodash