Yeoman vulnerabilities
We track 1 vulnerability in Yeoman products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Yeoman vulnerabilities
- 8.6 High severity
environment: Inclusion of Functionality from Untrusted Control Sphere
Yeoman Environment provides an API to discover, create, and run generators, and to configure where and how a generator is resolved. Versions 2.9.0 through 6.0.0 install missing local generator packages from caller-supplied package names without user confirmati