CVE-2019-10773 vulnerabilities

Vulnerabilities for packages: yarn...

CVE-2019-10773

creationtimestamp| type| source ---|---|--- 2024-03-12 10:36:31+00:00| seen| https://t.me/ctinow/205498...

Photon OS 3.0: Yarn PHSA-2020-3.0-0057

An update of the yarn package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133810;...

Important: Red Hat Security Advisory: Red Hat Quay v3.2.1 security update

An update is now available for Red Hat Quay 3. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

Fedora 31 : nodejs-yarn (2020-766ce5adae)

Update to 1.21.1 - Provides /usr/bin/yarn - Resolves CVE-2019-10773 - Rename nodejs-yarn binary package to yarnpkg similar to other distros - Use nodejs macros consistently throughout spec - Make the tests fail the build if the tests fail Note that Tenable Network Security has extracted the...

Fedora: Security Advisory for nodejs-yarn (FEDORA-2020-766ce5adae)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Photon OS 2.0: Yarn PHSA-2020-2.0-0200

An update of the yarn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0200. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132990;...

Photon OS 1.0: Yarn PHSA-2020-1.0-0264

An update of the yarn package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0264. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid132986;...

BELL-CVE-2019-10773 CVE-2019-10773 does not affect BellSoft software

Bulletin has no description...

CVE-2019-10773

The CVE-2019-10773 issue affects Yarn prior to 1.21.1, where the package install functionality can be abused via specially crafted bin keys to generate arbitrary symlinks on the host filesystem. This can lead to existing files being overwritten depending on user permissions. The vulnerability ste...

@jamesbliss/react-flickity (>=1.0.0 <=1.4.0), @jamesbliss/react-spy (=0.0.1) +21 more potentially affected by CVE-2019-10773 via yarn (>=1.0.2 <=1.21.0)

yarn NPM version =1.0.2, =1.0.0, =1.9.9, =1.0.0, =1.0.21, =8.3.8, =0.1.0, =3.0.0, =0.0.1, =0.0.0-semantic-release, =1.5.9, =1.1.2, =1.13.1 and more Source cves: CVE-2019-10773 Source advisory: SNYK:JS-YARN-537806...