Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/05/19 7:46 p.m.•33 views

Turbo: Unexpected local code execution during Yarn Berry detection

Impact Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected versions, package manager detection executed yarn --version from the project directory, which could cause Yarn to load and execute a...

9.8CVSS6.4AI score0.00643EPSS
SaveExploits0References3Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/15 12:00 a.m.•0 views

CVE-2026-45772: Untrusted Search Path

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected versions, package manager detection...

9.8CVSS6.5AI score0.00643EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•24 views

RHEL 7 : gupnp (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - hostapd: UPnP SUBSCRIBE misbehavior in WPS AP CVE-2020-12695 Note that Nessus has not tested for this issue but has...

7.5CVSS6.6AI score0.15193EPSS
SaveExploits3References1
Rows per page
Query Builder