MAL-2025-19567 Malicious code in ember-pvd7i-encu7-yarn-project (npm)

The package ember-pvd7i-encu7-yarn-project was found to contain malicious code...

Malicious code in treasure-yarn-wea438-project (npm)

The package treasure-yarn-wea438-project was found to contain malicious code...

Malicious code in yarn-cling (npm)

The package yarn-cling was found to contain malicious code...

Malicious code in reef-v0fw7-6emc1-yarn-project (npm)

The package reef-v0fw7-6emc1-yarn-project was found to contain malicious code...

Malicious code in xenith-k07oa-gwxa7-yarn-project (npm)

The package xenith-k07oa-gwxa7-yarn-project was found to contain malicious code...

MAL-2025-20998 Malicious code in frost-yarn-vxi052-project (npm)

The package frost-yarn-vxi052-project was found to contain malicious code...

MAL-2025-23363 Malicious code in iris-7cmmq-sgta5-yarn-project (npm)

The package iris-7cmmq-sgta5-yarn-project was found to contain malicious code...

MAL-2025-40343 Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...

MAL-2025-40341 Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

Malicious code in bison-7dawf-siudn-yarn-project (npm)

The package bison-7dawf-siudn-yarn-project was found to contain malicious code...

MAL-2025-40350 Malicious code in yarn-y2b1g-dxb20-yew-project (npm)

The package yarn-y2b1g-dxb20-yew-project was found to contain malicious code...

MAL-2025-27756 Malicious code in nova-uoho4-jtz6m-yarn-project (npm)

The package nova-uoho4-jtz6m-yarn-project was found to contain malicious code...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-11.fc41

Fast, reliable, and secure dependency management...

SUSE CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A flaw was found in yarnpkg/yarn. The explodeHostedGitFragment function in src/resolvers/exotics/hosted-git-resolver.js is susceptible to a resource exhaustion condition due to inefficient regular expression processing. This vulnerability allows a network attacker to provide a crafted Git fragmen...

DEBIAN-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

UBUNTU-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...