YAML Bomb DoS Vulnerability Fix in Frontend Metadata Parser

github.com 2026-07-14查看中文 →

Security AdvisoryMediumHedgeDoc

Affected:

HedgeDoc

Fixed in:

HedgeDoc with js-yaml 4.2.0 and constrain-object dependency

Referenced CVEs: CVE-2026-58486

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Pathling Server Authorization Bypass via Typed FHIR Providers (CVE-2025-47863) 2026-08-08 nanobot-ai MCP enabledTools Allowlist Bypass Exposes Resources 2026-08-08 MCP Server Security Configuration Bypass Vulnerability Summary 2026-08-08 nanobot MCP enabled_tools Allowlist Bypass Exposes Resources and Prompts 2026-08-08 OpenBao v2.5.3 Inline Auth Causes Loss of Custom Headers in Audit Logs 2026-08-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive