Skip to content
OpenAdvisories

Package · Ubuntu

node-yarnpkg

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-8262

    yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

    A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expressio…

    yarnpkg Yarn node-yarnpkg node-yarnpkg Debian Ubuntu