@turbo vulnerabilities
We track 1 vulnerability in @turbo products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest @turbo vulnerabilities
- 9.8 Critical severity
turborepo: Untrusted Search Path
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affected