VDB
GHSA-5p4m-2wfm-xmqj
GHSA-5p4m-2wfm-xmqj
PUBLISHED
CVSS 7.5 HIGH
JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | kubeflow-katib | 0 |
| chainguard | unleash-fips | 0 |
| chainguard | code-server | 0 |
| chainguard | homepage | 0 |
| chainguard | mongod-8.3 | 0 |
| chainguard | opensearch-dashboards-2-fips | 0 |
| chainguard | sqlpad | 0 |
| wolfi | lerna | 0 |
| chainguard | langfuse-3 | 0 |
| chainguard | wazuh-dashboard-fips | 0 |
| chainguard | langfuse-fips-4 | 0 |
| chainguard | arangodb-3.12 | 0 |
| wolfi | vitess-24 | 0, 0 |
| wolfi | renovate | 0 |
| npm | js-yaml | |
| chainguard | authentik-fips-2025.12 | 0 |
| chainguard | saf | 0 |
| chainguard | vitess-24 | 0, 0 |
| wolfi | pulumi | 0 |
| chainguard | eslint | 0 |
…and 47 more
Timeline
- Aug 6, 2026 CVE Published