Skip to content
OpenAdvisories

Vendor

yarn

1 known vulnerabilities.

Products

yarn 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2019-5448

    Missing Encryption of Sensitive Data in yarn

    Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

    yarn yarn node-yarnpkg yarn Debian Wolfi npm