yarnpkg Info

yarnpkg was added to epel10 repo on 2025-01-17
Page updated: 2025-08-22 17:52
Repo Status - Overall Status

Source NVR: yarnpkg-1.22.22-11.el10_1 (2025-01-17)

Binary Packages

yarnpkg yarnpkg-1.22.22-11.el10_1

Bugs

2384000 NEW CVE-2025-8263 yarnpkg: prettier parseNestedCSS ReDoS [epel-10]
2387011 NEW CVE-2025-54798 yarnpkg: tmp Symbolic Link Write Vulnerability [epel-10]
2389960 NEW CVE-2025-9287 yarnpkg: Cipher-base hash manipulation [epel-10]
2389999 NEW CVE-2025-9288 yarnpkg: Missing type checks leading to hash rewind and passing on crafted data [epel-10]
2390167 NEW CVE-2025-9308 yarnpkg: yarnpkg regular expression denial of service [epel-10]

Install Failures