MAL-2025-40335 Malicious code in yarn-cling (npm)

The package yarn-cling was found to contain malicious code...

MAL-2025-39611 Malicious code in xenith-k07oa-gwxa7-yarn-project (npm)

The package xenith-k07oa-gwxa7-yarn-project was found to contain malicious code...

MAL-2025-31197 Malicious code in quasar-xoj74-gd6qr-yarn-project (npm)

The package quasar-xoj74-gd6qr-yarn-project was found to contain malicious code...

MAL-2025-27756 Malicious code in nova-uoho4-jtz6m-yarn-project (npm)

The package nova-uoho4-jtz6m-yarn-project was found to contain malicious code...

MAL-2025-40344 Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

MAL-2025-40353 Malicious code in yarn_6zomo_6iwd6_moon (npm)

The package yarn6zomo6iwd6moon was found to contain malicious code...

MAL-2025-15737 Malicious code in bison-7dawf-siudn-yarn-project (npm)

The package bison-7dawf-siudn-yarn-project was found to contain malicious code...

MAL-2025-19567 Malicious code in ember-pvd7i-encu7-yarn-project (npm)

The package ember-pvd7i-encu7-yarn-project was found to contain malicious code...

Malicious code in yarn-frx82-ytg1p-verdure-project (npm)

The package yarn-frx82-ytg1p-verdure-project was found to contain malicious code...

Malicious code in yarn-gjk0c-ahopg-orbit-project (npm)

The package yarn-gjk0c-ahopg-orbit-project was found to contain malicious code...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-11.fc41

Fast, reliable, and secure dependency management...

SUSE CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A flaw was found in yarnpkg/yarn. The explodeHostedGitFragment function in src/resolvers/exotics/hosted-git-resolver.js is susceptible to a resource exhaustion condition due to inefficient regular expression processing. This vulnerability allows a network attacker to provide a crafted Git fragmen...

DEBIAN-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

UBUNTU-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...