yarnpkg vulnerabilities
2 published CVEs name yarnpkg among the affected products.
- 2Published CVEs2 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-9308
yarnpkg Yarn request-manager.js setOptions redos
yarnpkg · Yarn
Medium4.8 - CVE-2025-8262
yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos
yarnpkg · Yarn
Medium5.3