Skip to content
Build

CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU… #1589

Sign in to view logs

CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU…

CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU… #1589

Triggered via push July 21, 2026 16:43
@vharsekovharseko
pushed 0dc64c0
master
Status Success
Total duration 1h 4m 42s
Artifacts 10

build.yml

on: push
Matrix: build-maven
build-docker
12m 2s
build-docker
Fit to window
Zoom out
Zoom in

Annotations

90 warnings
build-maven (macos-latest, 11): openam-shared/src/main/java/com/sun/identity/common/CaseInsensitiveHashMap.java#L94
[unchecked] entrySet() in CaseInsensitiveHashMap overrides entrySet() in AbstractMap
build-maven (macos-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (macos-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1090
[unchecked] unchecked call to <T>toArray(T[]) as a member of the raw type Collection
build-maven (macos-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (macos-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (macos-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 17): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1090
[unchecked] unchecked call to <T>toArray(T[]) as a member of the raw type Collection
build-maven (windows-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (windows-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 25): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/sun/identity/common/CaseInsensitiveHashMap.java#L94
[unchecked] entrySet() in CaseInsensitiveHashMap overrides entrySet() in AbstractMap
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1090
[unchecked] unchecked call to <T>toArray(T[]) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (ubuntu-latest, 21): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1090
[unchecked] unchecked call to <T>toArray(T[]) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/sun/identity/common/CaseInsensitiveHashMap.java#L94
[unchecked] entrySet() in CaseInsensitiveHashMap overrides entrySet() in AbstractMap
build-maven (windows-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 11): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection
build-maven (windows-latest, 11): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1090
[unchecked] unchecked call to <T>toArray(T[]) as a member of the raw type Collection
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L90
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/locale/AMResourceBundleCache.java#L88
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L109
[removal] getSecurityManager() in System has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/services/util/Crypt.java#L81
[removal] SecurityManager in java.lang has been deprecated and marked for removal
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/sun/identity/shared/debug/Debug.java#L203
[unchecked] unchecked call to put(K,V) as a member of the raw type Map
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1130
[unchecked] unchecked call to retainAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1124
[unchecked] unchecked call to removeAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1118
[unchecked] unchecked call to addAll(Collection<? extends E>) as a member of the raw type Collection
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1112
[unchecked] unchecked call to containsAll(Collection<?>) as a member of the raw type Collection
build-maven (ubuntu-latest, 26): openam-shared/src/main/java/com/iplanet/am/util/Cache.java#L1100
[unchecked] unchecked call to add(E) as a member of the raw type Collection

Artifacts

Produced during runtime
Name Size Digest
OpenIdentityPlatform~OpenAM~U2W493.dockerbuild
243 KB
sha256:8ee3030a566b1d38adb08b777a85fe1d7b507cd8ba20c040ffbe1bf7f85bd574
macos-latest-11
1.84 GB
sha256:261a18c8d79c45127a38e22c801221e6be2617394575b146064d791f5610c6ac
macos-latest-26
1.84 GB
sha256:9a61c5f7314c682c284263431be8961826de59a3927c7da632bcdeb780bb2cde
ubuntu-latest-11
1.84 GB
sha256:599a2f6a1fd0ad21db315bdad7a16046b1dfb160cf46bf96adcac07c79911e52
ubuntu-latest-17
1.84 GB
sha256:7772ca9c0881c4d3c189bb4c887a1b5f170f52de6f74c20e64c2e272f909659e
ubuntu-latest-21
1.84 GB
sha256:cbce03c8b1f0f70d65a29b035ae896edf0cd47c2d4b84e63fd26cfc6c7dfb2c2
ubuntu-latest-25
1.84 GB
sha256:f4de81fb1097b8616153405d015b1fd399e958fa53ea8ac88c34efdda487a163
ubuntu-latest-26
1.84 GB
sha256:302816f1c6263f22b562a5ee15ba4d4b030c0bf91b5cf34093769c1efea2729e
windows-latest-11
1.84 GB
sha256:c24f5905478ff8775a35661406d5e078b8420a49f9deb19e39410db1b7571103
windows-latest-26
1.84 GB
sha256:925abe534fe932da73b0710c475ba6f2e0e68c03e90e64e2256b28457b3279f8