JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases

[LongBu]

Hi there,

Please see the following for further details as currently js-yaml is set to ^3.13.1: GHSA-h67p-54hq-rp68
Thank you for your time!