yayson vulnerabilities

CVEs whose affected-version data names the yayson package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61534Critical· 9.1PoC

1w ago

Yayson is a library for serializing and reading JSON API data in JavaScript

Yayson is a library for serializing and reading JSON API data in JavaScript. Prior to 4.3.0, Store and LegacyStore use attacker-controlled JSON:API type, id, and relationship names as keys in plain-object lookup tables in src/yayson/stor…

▾ Abyssalyayson · yaysonEPSS 0.78%via NVD