Vendor

    Yarnpkg

    8 known vulnerabilities in products by Yarnpkg, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Yarnpkg
    HighCVE-2020-8131

    Yarn: Path Traversal

    		7.5
    HighCVE-2019-10773

    Yarn: security vulnerability

    		7.8
    MediumCVE-2019-15608

    Yarn: Business Logic Errors

    		5.9
    MediumCVE-2018-12556

    Yarnpkg Website: security vulnerability

    		5.9
    HighCVE-2025-8262

    yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos

    		4.3
    HighCVE-2019-5448

    Yarn: Missing Encryption of Sensitive Data

    		8.1
    HighCVE-2021-4435

    Yarn: untrusted search path

    also in 2 other products

    		7.7
    MediumCVE-2025-9308

    yarnpkg Yarn request-manager.js setOptions redos

    		3.3

    Products

    Products by Yarnpkg
    Yarn70