Skip to content

v1.13.1

Latest

Choose a tag to compare

@mistermicheels mistermicheels released this 23 Nov 13:29
· 1 commit to master since this release

This release fixes a potential YAML parsing vulnerability that could potentially be exploited by maliciously crafted YAML front matter.

Fixes:

  • Improve safety of YAML parsing by updating the js-yaml package to fix a vulnerability that might be able to be exploited via the front-matter package that we use (this only matters if you run the tool on files that you cannot trust, see the vulnerability report for more information)