Skip to content
OpenAdvisories

Vendor

DerYeger

1 known vulnerabilities.

Products

yeger 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-59160

    Yeger: Unauthenticated Network-Exposed Turborepo Task Execution via /api/run

    Yeger is a monorepo for npm packages maintained under the yeger scope. Prior to 2.8.9, the turbo-graph package starts its embedded Next.js server from packages/turbo-graph/src/index.ts on all interfaces, including 0.0.0.0:29312 by default, while the GET handl…

    DerYeger yeger @yeger/turbo-graph npm