Lucene search
+L

1 matches found

OSV
OSV
added 2025/06/25 5:31 a.m.6 views

MGASA-2025-0194 Updated yarnpkg packages fix security vulnerabilities

CVE-2024-37890 yarnpkg: denial of service when handling a request with many HTTP headers. CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification. CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file And other vulnerabilities in...

9.8CVSS6.6AI score0.03346EPSS
SaveExploits7References4
Rows per page
Query Builder