CVE-2026-73643 | nodeca js-yaml up to 5.2.1 Parser src/parser/parser.ts readFlowCollection infinite loop (Nessus ID 335459)

A vulnerability categorized as problematic has been discovered in nodeca js-yaml up to 5.2.1. Affected is the function readFlowCollection of the file src/parser/parser.ts of the component Parser. Executing a manipulation can lead to infinite loop. This vulnerability is registered as CVE-2026-73643. It is possible to launch the attack remotely. No... Weiterlesen