786 matches found
CVE-2025-9308 yarnpkg Yarn request-manager.js setOptions redos
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
CVE-2025-9308
CVE-2025-9308 affects yarnpkg Yarn up to 1.22.22. The vulnerability is in the function setOptions of src/util/request-manager.js, where manipulation leads to inefficient regular expression complexity. Local access is required. The advisory consistently indicates the issue affects products that ar...
CVE-2025-9308 yarnpkg Yarn request-manager.js setOptions redos
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
CVE-2025-9308
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
Regular Expression Denial of Service (ReDoS)
Overview org.webjars.npm:yarn is a package for dependency management. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the setOptions function in the src/util/request-manager.js file. An attacker can cause resource exhaustion by supplying crafted...
06demo-1 (1.0.0), 1337cli (>=0.0.1, <=0.0.2) +4584 more potentially affected by CVE-2025-9308 via yarn (>=0.15.1, <=2.4.3)
yarn NPM version =0.15.1, =0.0.1, =1.0.9, =0.0.2, =1.17.6-next.0, =1.0.0, =1.0.0, =0.0.3, =1.1.2, =1.1.5 and more Source cves: CVE-2025-9308 Source advisory: SNYK:JS-YARN-12143051...
CVE-2025-9308
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
CVE-2025-9308
A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects...
Yarn 安全漏洞
Yarn is an open source package installation, management tool from Yarn Open Source. A security vulnerability exists in Yarn 1.22.22 and earlier versions that stems from insufficient regular expression complexity...
PT-2025-34246
Name of the Vulnerable Software and Affected Versions: yarnpkg Yarn versions up to 1.22.22 Description: A vulnerability exists in Yarn Package Manager due to inefficient regular expression complexity within the setOptions function located in the src/util/request-manager.js file. Local access is...
Linux Distros Unpatched Vulnerability : CVE-2019-10773
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted bin keys...
Linux Distros Unpatched Vulnerability : CVE-2025-8262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file...
Malicious code in yarn-cling (npm)
The package yarn-cling was found to contain malicious code...
Malicious code in yarn-design-system-swiper (npm)
The package yarn-design-system-swiper was found to contain malicious code...
Malicious code in yarn_z3iz0_wfi9x_iris (npm)
The package yarnz3iz0wfi9xiris was found to contain malicious code...
Malicious code in dynamo-r1fvy-txt19-yarn-project (npm)
The package dynamo-r1fvy-txt19-yarn-project was found to contain malicious code...
Malicious code in ember-pvd7i-encu7-yarn-project (npm)
The package ember-pvd7i-encu7-yarn-project was found to contain malicious code...
Malicious code in frost-yarn-vxi052-project (npm)
The package frost-yarn-vxi052-project was found to contain malicious code...