gray-matter is a Parse front-matter from a string or file. Fast, reliable and easy to use. Parses YAML front matter by default, but also has support for YAML, JSON, TOML or Coffee Front-Matter, with options to set custom delimiters. Used by metalsmith, assemble, verb and
Affected versions of this package are vulnerable to Arbitrary Code Injection via the eval process in lib/engines.js when parsing front matter with the language set to js or javascript. An attacker can execute arbitrary code by supplying crafted input that is evaluated by the JavaScript engine.