[UD] Upgrade vulnerable versions of used libraries

[olexii4]

Is your enhancement related to a problem? Please describe

Prototype Pollution vulnerability in js-yaml, affects versions prior to 4.1.1.

This vulnerability allows an attacker to exploit the YAML merge (<<) operator to pollute object prototypes, potentially leading to:

• Denial of Service (DoS)
• Remote Code Execution (RCE) in certain scenarios
• Security bypass

CVE Reference: This fix addresses the prototype pollution issue in the yaml merge (<<) operator.

Describe the solution you'd like

Upgrade js-yaml from 4.1.0 to 4.1.1.

References

• js-yaml Changelog
• js-yaml 4.1.1 Release