nodeca
- Total products in the ecosystem
- 2
- Total vulnerabilities (90 days)
- 3
en
Verify to analyze this security profile
As of 10/22/2026, nodeca recorded 3 security vulnerabilities in the last 90 days across 2 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, js-yaml had the most security vulnerabilities in the nodeca ecosystem, with 2 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-104861probe-image-size: Quadratic-time Denial of Service in the SVG ParserCVE-2026-84375js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sourcesCVE-2026-73643js-yaml: Exponential parsing time in the flow collections leads to denial of serviceCVE-2026-59868js-yaml: YAML merge-key chains can force quadratic CPU consumptionCVE-2026-59869js-yaml: YAML merge-key chains can force quadratic CPU consumption9 Results | Page 1 of 1
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |