Skip to content

fix: bound YAML anchor/alias expansion to prevent OOM (billion laughs) - #3000

Open
Treicy Sanchez (Treicysg) wants to merge 2 commits into
microsoft:mainfrom
Treicysg:fix/yaml-alias-expansion-dos
Open

fix: bound YAML anchor/alias expansion to prevent OOM (billion laughs)#3000
Treicy Sanchez (Treicysg) wants to merge 2 commits into
microsoft:mainfrom
Treicysg:fix/yaml-alias-expansion-dos

feat: make YAML conversion limits configurable

a1869ef
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL completed Aug 7, 2026 in 4s

1 configuration not found

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

API upload

  • ❓  <default>

View all branch alerts.