Fedora: Security Advisory (FEDORA-2025-ee9e7fb981)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : yarnpkg (2025-ee9e7fb981)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ee9e7fb981 advisory. Fix CVE-2025-59343. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-12.fc41

Fast, reliable, and secure dependency management...

Fedora 41 : yarnpkg (2025-4dd58248ff)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4dd58248ff advisory. Fix CVE-2025-59343. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

Fedora: Security Advisory (FEDORA-2025-418da1e0e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-4dd58248ff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : yarnpkg (2025-418da1e0e6)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-418da1e0e6 advisory. Fix CVE-2025-59343. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not teste...

EUVD-2018-4516

Malware in sbrugna...

EUVD-2025-22855

Malicious code in bioql PyPI...

[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-11.fc42

Fast, reliable, and secure dependency management...

Fedora 41 : yarnpkg (2025-b19f3ed5f4)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-b19f3ed5f4 advisory. Apply fixes for CVE-2025-8262 and CVE-2025-7783. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 42 : yarnpkg (2025-cf39a93e95)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cf39a93e95 advisory. Apply fixes for CVE-2025-8262 and CVE-2025-7783. Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2025-8262

A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch...

CVE-2025-8262

The IBM Watsonx BI bulletin confirms CVE-2025-8262 affects yarnpkg Yarn up to 1.22.22, specifically the function explodeHostedGitFragment in src/resolvers/exotics/hosted-git-resolver.js. The issue arises from inefficient regular expression complexity, enabling a remote attack. A patch exists (com...

[SECURITY] Fedora 41 Update: yarnpkg-1.22.22-9.fc41

Fast, reliable, and secure dependency management...

Fedora 41 : yarnpkg (2025-d3dee9f37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-d3dee9f37d advisory. Update bundled pbkdf2 library. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

[SECURITY] Fedora 42 Update: yarnpkg-1.22.22-9.fc42

Fast, reliable, and secure dependency management...

Fedora 42 : yarnpkg (2025-96ff8c2897)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-96ff8c2897 advisory. Update bundled pbkdf2 library. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

MGASA-2025-0194 Updated yarnpkg packages fix security vulnerabilities

CVE-2024-37890 yarnpkg: denial of service when handling a request with many HTTP headers. CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification. CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file And other vulnerabilities in...

Updated yarnpkg packages fix security vulnerabilities

CVE-2024-37890 yarnpkg: denial of service when handling a request with many HTTP headers. CVE-2024-48949 yarnpkg: Missing Validation in Elliptic's EDDSA Signature Verification. CVE-2024-12905 yarnpkg: link following and path traversal via maliciously crafted tar file And other vulnerabilities in...