Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-5017

Высокий

ALT-PU-2021-5017: package yarn update to version 1.22.17-alt1

Источник
errata.altlinux.org
Дата публикации
01.11.2021
Дата обновления
01.11.2021
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades yarn to version 1.22.17-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 3 года назад

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

CVSS3: 7.7
redhat
около 5 лет назад

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

CVSS3: 7.8
nvd
почти 3 года назад

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

CVSS3: 7.8
debian
почти 3 года назад

An untrusted search path vulnerability was found in Yarn. When a victi ...

CVSS3: 7.7
github
почти 3 года назад

Yarn untrusted search path vulnerability