yarnpkg vulnerabilities (Mageia)
27 vulnerabilities.
-
yarnpkgMageia tar-fs has issue where extract can write outside the specified dir with a specific tarball 8.7 High -
yarnpkgMageia tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File 7.5 High -
yarnpkgMageia Elliptic's verify function omits uniqueness validation 9.1 Critical -
yarnpkgMageia The Permission Model assumes that any path starting with two backslashes \ has a four-character... 3.6 Low -
yarnpkgMageia Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with... 8.1 High -
yarnpkgMageia A vulnerability has been identified in Node.js, affecting users of the experimental permission... 3.3 Low -
yarnpkgMageia A vulnerability has been identified in Node.js, affecting users of the experimental permission... 2.9 Low -
yarnpkgMageia A security flaw in Node.js allows a bypass of network import restrictions. By embedding non... 6.5 Medium -
yarnpkgMageia Denial of service when handling a request with many HTTP headers in ws 7.5 High -
yarnpkgMageia Regular Expression Denial of Service in micromatch 5.3 Medium -
yarnpkgMageia A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack... 6.5 Medium -
yarnpkgMageia Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked... 7.4 High -
yarnpkgMageia A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP... 7.5 High -
yarnpkgMageia On Linux, Node.js ignores certain environment variables if those may have been set by an... 7.5 High -
yarnpkgMageia browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack 6.5 Medium -
yarnpkgMageia Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code.... 5.3 Medium -
yarnpkgMageia When the Node.js policy feature checks the integrity of a resource against a trusted manifest,... 7.5 High -
yarnpkgMageia Undici's cookie header not cleared on cross-origin redirect in fetch 3.9 Low -
yarnpkgMageia A privilege escalation vulnerability exists in the experimental policy mechanism in all active... 7.5 High -
yarnpkgMageia The use of `module.constructor.createRequire()` can bypass the policy mechanism and require... 8.8 High -
yarnpkgMageia The use of `Module._load()` can bypass the policy mechanism and require modules outside of the... 9.8 Critical -
yarnpkgMageia Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
yarnpkgMageia tough-cookie Prototype Pollution vulnerability 6.5 Medium -
yarnpkgMageia minimatch ReDoS vulnerability 7.5 High -
yarnpkgMageia loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) 7.5 High -
yarnpkgMageia Arbitrary Code Execution 8.6 High -
yarnpkgMageia Prototype Pollution in async 7.8 High