Known vulnerabilities in n/a Yarn
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-4435 | An untrusted search path vulnerability was found in Yarn | 7.7 High | Feb 4, 2024 |
| CVE-2019-15608 | The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before… | Not rated | Mar 15, 2020 |
| CVE-2020-8131 | Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem… | Not rated | Feb 24, 2020 |
| CVE-2019-10773 | In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host… | Not rated | Dec 16, 2019 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79