yarnpkg vulnerabilities (Red Hat)
5 vulnerabilities.
-
yarnpkgRed Hat ws: Uninitialized memory disclosure 4.4 Medium -
yarnpkgRed Hat js-yaml quadratic-complexity denial of service via YAML11_SCHEMA !!omap parsing 7.5 High -
yarnpkgRed Hat js-yaml: YAML merge-key chains can force quadratic CPU consumption 5.3 Medium -
yarnpkgRed Hat brace-expansion: Large numeric range defeats documented `max` DoS protection 6.5 Medium -
yarnpkgRed Hat lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 6.5 Medium