From 87c5ecc9d02f113855074a985c1828a617d9e0dc Mon Sep 17 00:00:00 2001 From: "godugu@progress.com" Date: Wed, 22 Jul 2026 22:43:19 -0700 Subject: [PATCH] MLE-31390: [HIGH] BDSA-2026-21635 in js-yaml v4.2.0 --- package-lock.json | 7 +++---- package.json | 1 + 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0d505f9c..583705db 100644 --- a/package-lock.json +++ b/package-lock.json @@ -2943,9 +2943,9 @@ } }, "node_modules/js-yaml": { - "version": "4.2.0", - "resolved": "https://pkg.harness.io/pkg/ct8onj8YTdaXtKaFsYCRLg/org-marklogic-npm/npm/js-yaml/-/4.2.0/js-yaml-4.2.0.tgz", - "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==", + "version": "4.3.0", + "resolved": "https://pkg.harness.io/pkg/ct8onj8YTdaXtKaFsYCRLg/org-marklogic-npm/npm/js-yaml/-/js-yaml-4.3.0.tgz", + "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==", "dev": true, "funding": [ { @@ -2957,7 +2957,6 @@ "url": "https://github.com/sponsors/nodeca" } ], - "license": "MIT", "dependencies": { "argparse": "^2.0.1" }, diff --git a/package.json b/package.json index c20d2474..dbc678c8 100644 --- a/package.json +++ b/package.json @@ -95,6 +95,7 @@ "diff": "9.0.0", "glob": "12.0.0", "glob-parent": "6.0.2", + "js-yaml": "4.3.0", "markdown-it": "14.2.0", "minimatch": "10.2.4", "semver": "7.5.3",