Skip to content

Any option to mitigate CVE-2025-64718? #6

@fdevans

Description

@fdevans

Describe the bug
We are seeing findings for CVE-2025-64718 and hoping there is a way to update to JS-YAML 4.1.1 in the dependency chain.

To Reproduce
Scan with a CVE scanner like Snyk.

Actual behavior
A clear and concise description of what happens.

Expected behavior
No finding of CVE-2025-64718 in OpenAPI-Explorer - which depends on this package.

Examples and context

Image

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions