node-yarnpkg vulnerabilities (Debian)

7 vulnerabilities.

• node-yarnpkg Debian yarnpkg Yarn request-manager.js setOptions redos CVE-2025-9308 Fix available 4.8 MediumAugust 21, 2025
• node-yarnpkg Debian yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos CVE-2025-8262 5.3 MediumJuly 28, 2025
• node-yarnpkg Debian Yarn: untrusted search path CVE-2021-4435 Fix available 7.7 HighFebruary 4, 2024
• node-yarnpkg Debian TOCTOU Race Condition in Yarn CVE-2019-15608 Fix available 5.9 MediumMarch 15, 2020
• node-yarnpkg Debian Path Traversal in Yarn CVE-2020-8131 Fix available 7.5 HighFebruary 24, 2020
• node-yarnpkg Debian Yarn Improper link resolution before file access (Link Following) CVE-2019-10773 Fix available 7.8 HighDecember 16, 2019
• node-yarnpkg Debian Missing Encryption of Sensitive Data in yarn CVE-2019-5448 Fix available 8.1 HighJuly 30, 2019