node-yarnpkg vulnerabilities (Ubuntu)

6 vulnerabilities.

• node-yarnpkg Ubuntu yarnpkg Yarn request-manager.js setOptions redos CVE-2025-9308 Fix available 4.8 MediumAugust 21, 2025
• node-yarnpkg Ubuntu yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos CVE-2025-8262 5.3 MediumJuly 28, 2025
• node-yarnpkg Ubuntu Yarn: untrusted search path CVE-2021-4435 Fix available 7.7 HighFebruary 4, 2024
• node-yarnpkg Ubuntu ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• node-yarnpkg Ubuntu Yarn Improper link resolution before file access (Link Following) CVE-2019-10773 Fix available 7.8 HighDecember 16, 2019
• node-yarnpkg Ubuntu The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only... CVE-2018-12556 5.9 MediumMay 16, 2019