yarnpkg Latest Vulnerabilities

Latest vulnerabilities published by yarnpkg

JSON RSS CSV 🔔 Create Alert Trigger

21 August 2025

Inefficient Regular Expression Complexity in Yarn by yarnpkg
CVE-2025-9308
YarnpkgYarn4.8MEDIUM

28 July 2025

Remote Code Execution Vulnerability in Yarn by yarnpkg
CVE-2025-8262
YarnpkgYarn5.3MEDIUM

15 March 2020

TOCTOU Vulnerability in Yarn Package Manager by Yarn
CVE-2019-15608
YarnpkgYarn5.9MEDIUM

24 February 2020

Arbitrary Filesystem Write Vulnerability in Yarn by Yarnpkg
CVE-2020-8131
YarnpkgYarn7.5HIGH

16 December 2019

Arbitrary Symlink Vulnerability in Yarn Package Manager
CVE-2019-10773
YarnpkgYarn7.8HIGH

16 May 2019

Signature Verification Flaw in Yarnpkg's Website Allows Signing of Tampered Packages
CVE-2018-12556
YarnpkgWebsite5.9MEDIUM