MAL-2025-40341 Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

MAL-2025-40334 Malicious code in yarn-8op22-scrzd-lucid-project (npm)

The package yarn-8op22-scrzd-lucid-project was found to contain malicious code...

MAL-2025-20998 Malicious code in frost-yarn-vxi052-project (npm)

The package frost-yarn-vxi052-project was found to contain malicious code...

MAL-2025-31197 Malicious code in quasar-xoj74-gd6qr-yarn-project (npm)

The package quasar-xoj74-gd6qr-yarn-project was found to contain malicious code...

MAL-2025-40347 Malicious code in yarn-lfou3-l8twh-vista-project (npm)

The package yarn-lfou3-l8twh-vista-project was found to contain malicious code...

MAL-2025-19567 Malicious code in ember-pvd7i-encu7-yarn-project (npm)

The package ember-pvd7i-encu7-yarn-project was found to contain malicious code...

MAL-2025-40345 Malicious code in yarn-frx82-ytg1p-verdure-project (npm)

The package yarn-frx82-ytg1p-verdure-project was found to contain malicious code...

MAL-2025-28843 Malicious code in paradise-ogok5-rh2h7-yarn-project (npm)

The package paradise-ogok5-rh2h7-yarn-project was found to contain malicious code...

Malicious code in yarn-gjk0c-ahopg-orbit-project (npm)

The package yarn-gjk0c-ahopg-orbit-project was found to contain malicious code...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-11.fc41

Fast, reliable, and secure dependency management...

SUSE CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A flaw was found in yarnpkg/yarn. The explodeHostedGitFragment function in src/resolvers/exotics/hosted-git-resolver.js is susceptible to a resource exhaustion condition due to inefficient regular expression processing. This vulnerability allows a network attacker to provide a crafted Git fragmen...

DEBIAN-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

UBUNTU-CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

PT-2025-31053 · Unknown +1 · Yarnpkg Yarn +1

Name of the Vulnerable Software and Affected Versions: yarnpkg Yarn versions up to 1.22.22 Description: A vulnerability exists in the explodeHostedGitFragment function within the src/resolvers/exotics/hosted-git-resolver.js file. This manipulation results in inefficient regular expression...