diff --git a/advisories/github-reviewed/2026/06/GHSA-h67p-54hq-rp68/GHSA-h67p-54hq-rp68.json b/advisories/github-reviewed/2026/06/GHSA-h67p-54hq-rp68/GHSA-h67p-54hq-rp68.json index b9d1dd2917b89..f58eca6f40b93 100644 --- a/advisories/github-reviewed/2026/06/GHSA-h67p-54hq-rp68/GHSA-h67p-54hq-rp68.json +++ b/advisories/github-reviewed/2026/06/GHSA-h67p-54hq-rp68/GHSA-h67p-54hq-rp68.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-h67p-54hq-rp68", - "modified": "2026-06-15T17:15:07Z", + "modified": "2026-06-15T17:15:08Z", "published": "2026-06-15T17:15:07Z", "aliases": [ "CVE-2026-53550" @@ -25,7 +25,7 @@ "type": "ECOSYSTEM", "events": [ { - "introduced": "0" + "introduced": "4.0.0" }, { "fixed": "4.2.0" @@ -36,6 +36,25 @@ "database_specific": { "last_known_affected_version_range": "<= 4.1.1" } + }, + { + "package": { + "ecosystem": "npm", + "name": "js-yaml" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.15.0" + } + ] + } + ] } ], "references": [ @@ -43,6 +62,10 @@ "type": "WEB", "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-h67p-54hq-rp68" }, + { + "type": "WEB", + "url": "https://github.com/nodeca/js-yaml/pull/761#issuecomment-4814031750" + }, { "type": "PACKAGE", "url": "https://github.com/nodeca/js-yaml"