github_osv/GHSA-gg6m-fhqv-hg56
Denial of Service in yar
Versions of `yar` prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value.
When an invalid encryped session cookie value is provided, the process will crash.
## Recommendation
Update to version 2.2.0 or later.
gitlab/npm/yar/GMS-2020-795
Denial of Service in yar
Versions of `yar` prior to 2.2.0 are affected by a denial of service vulnerability related to an invalid encrypted session cookie value.
When an invalid encryped session cookie value is provided, the process will crash.
## Recommendation
Update to version 2.2.0 or later.