Yarnpkg vulnerabilities
We track 1 vulnerability in Yarnpkg products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2025.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Yarnpkg vulnerabilities
- 7.5 High severity
Yarn: Inefficient Regular Expression Complexity
A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression