Описание
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.
Отчет
This flaw affects Windows versions only.
Дополнительная информация
Статус:
EPSS
7.7 High
CVSS3
Связанные уязвимости
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.
An untrusted search path vulnerability was found in Yarn. When a victi ...
ALT-PU-2021-5017: package `yarn` update to version 1.22.17-alt1
EPSS
7.7 High
CVSS3