Skip to content

[MEDIUM] js-yaml has prototype pollution in merge (<<) #2807

New issue
New issue
Open
Open
[MEDIUM] js-yaml has prototype pollution in merge (<<)#2807
Labels
dependabot-security-findingneeds-triagePriority and effort undetermined yetpriority/p0Needs to be addressed immediately
@cdk8s-automation

Description

@cdk8s-automation
cdk8s-automation
opened on Nov 17, 2025

Github reported a new dependabot security alert at: https://github.com/cdk8s-team/cdk8s/security/dependabot/47

Metadata

Metadata

Assignees

No one assigned

    Labels

    dependabot-security-findingneeds-triagePriority and effort undetermined yetpriority/p0Needs to be addressed immediately

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions