Поиск уязвимостей
Количество 6
Количество 6
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.
CVE-2019-10773
In Yarn before 1.21.1, the package install functionality can be abused ...
GHSA-5xf4-f2fq-f69j
Yarn Improper link resolution before file access (Link Following)
ALT-PU-2020-1415
ALT-PU-2020-1415: package `yarn` update to version 1.22.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | почти 7 лет назад |
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | почти 7 лет назад |
 | CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set. | CVSS3: 7.8 | 2% Низкий | почти 7 лет назад |
| CVE-2019-10773 In Yarn before 1.21.1, the package install functionality can be abused ... | CVSS3: 7.8 | 2% Низкий | почти 7 лет назад |
| GHSA-5xf4-f2fq-f69j Yarn Improper link resolution before file access (Link Following) | CVSS3: 7.8 | 2% Низкий | больше 6 лет назад |
| ALT-PU-2020-1415 ALT-PU-2020-1415: package `yarn` update to version 1.22.0-alt1 | CVSS3: 7.8 | больше 6 лет назад |
Уязвимостей на страницу