Fix vulnerabilities

[imnutz]

• In js-yaml 4.1.0, 4.0.0, and 3.14.1 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (proto). All users who parse untrusted yaml documents may be impacted.

[kietdo360]

LGTM , but please add some info about the vulnerabilities in the description.

[eddsteel]

Reviewed for data exfiltration.