Search results

Security: bump js-yaml dependency to >=4.1.1 (CVE chain)

Status: Open.

#26 In istanbuljs/load-nyc-config;

· Patrikbjoh opened on Dec 30, 2025

[Security] - Vulnerability CVE-2025-64718

Status: Open.

#25 In istanbuljs/load-nyc-config;

· mspoerer opened on Nov 20, 2025

js-yaml dependency below 4.1.1 has prototype pollution in merge

Status: Open.

#22 In istanbuljs/load-nyc-config;

· chrstrock opened on Nov 14, 2025

Consider supporting ".nyc.config.js" as a config file option

Status: Open.

#17 In istanbuljs/load-nyc-config;

· mririgoyen opened on Aug 31, 2020

Consider switching YAML libraries

Status: Open.

#13 In istanbuljs/load-nyc-config;

· eemeli opened on Apr 19, 2020