CVE-2026-59870

{"id": "CVE-2026-59870", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-59870", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-08T15:50:31.265965Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nodeca", "product": "js-yaml", "versions": [{"status": "affected", "version": ">= 5.0.0, < 5.2.1"}, {"status": "affected", "version": ">= 3.0.0, < 3.15.1"}, {"status": "affected", "version": ">= 4.0.0, < 4.3.1"}]}]}], "published": "2026-07-08T16:16:33.580", "references": [{"url": "https://github.com/nodeca/js-yaml/commit/22a8071ef032117bc6249c330b240ac3aa2d3ded", "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/commit/39f3211a2f01b3c6982710cf21434ab7060acefe", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/commit/c3cc4b0bb9ddb9af2dd9b61e0d56f5ce7983cd4a", "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.1", "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.1", "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/releases/tag/5.2.1", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-724g-mxrg-4qvm", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-407"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "js-yaml is a JavaScript YAML parser and dumper. Prior to 3.15.1, 4.3.1, and 5.2.1, YAML11_SCHEMA support for the !!omap tag in src/tag/sequence/omap.ts uses omapTag.addItem() to perform a linear duplicate-key scan on every insertion, causing O(n^2) CPU consumption when yaml.load() parses a crafted ordered-map document. In v3 and v4, !!omap is active and exploitable by default. v5 doesn't use !!omap by default, and the chances of activating it are very low.This issue is fixed in 3.15.1, 4.3.1, and 5.2.1."}, {"lang": "es", "value": "js-yaml es un analizador y volcador YAML de JavaScript. Versiones anteriores a la 3.15.1, 4.3.1 y 5.2.1, el soporte de YAML11_SCHEMA para la etiqueta !!omap en src/tag/sequence/omap.ts utiliza omapTag.addItem() para realizar un escaneo lineal de claves duplicadas en cada inserci\u00f3n, lo que provoca un consumo de CPU de O(n^2) cuando yaml.load() analiza un documento de mapa ordenado manipulado. En las versiones 3 y 4, !!omap est\u00e1 activo y es explotable por defecto. La versi\u00f3n 5 no utiliza !!omap por defecto, y las posibilidades de activarlo son muy bajas. Este problema se ha solucionado en la 3.15.1, 4.3.1 y 5.2.1."}], "lastModified": "2026-10-25T20:10:00.147", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nodeca:js-yaml:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "364B7995-9A39-4BB4-92C4-B0D7A946F16B", "versionEndExcluding": "5.2.1", "versionStartIncluding": "5.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}