Skip to content
OpenAdvisories

Package · npm

@turbo/workspaces

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • None 0.0
    CVE-2026-45772

    Turborepo: Unexpected local code execution during Yarn Berry detection

    Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affecte…

    vercel @turbo turborepo workspaces Wolfi npm