3.13.0 released

nodeca · Mar 20, 2019 · 9d4ce5e · 9d4ce5e
1 parent f64c673
commit 9d4ce5e
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,10 @@
+3.13.0 / 2019-03-20
+-------------------
+
+- Security fix: `safeLoad()` can hang when arrays with nested refs
+  used as key. Now throws exception for nested arrays. #475.
+
+
 3.12.2 / 2019-02-26
 -------------------
 

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "js-yaml",
-  "version": "3.12.2",
+  "version": "3.13.0",
   "description": "YAML 1.2 parser and serializer",
   "keywords": [
     "yaml",