yarnpkg Info

yarnpkg was added to epel9 repo on 2025-10-07
Page updated: 2025-10-08 01:41
Repo Status - Overall Status

Source NVR: yarnpkg-1.22.22-11.el9 (2025-10-07)

Binary Packages

yarnpkg yarnpkg-1.22.22-11.el9

Bugs

2384003 NEW CVE-2025-8263 yarnpkg: prettier parseNestedCSS ReDoS [epel-9]
2387018 NEW CVE-2025-54798 yarnpkg: tmp Symbolic Link Write Vulnerability [epel-9]
2389965 NEW CVE-2025-9287 yarnpkg: Cipher-base hash manipulation [epel-9]
2390004 NEW CVE-2025-9288 yarnpkg: Missing type checks leading to hash rewind and passing on crafted data [epel-9]
2390169 NEW CVE-2025-9308 yarnpkg: yarnpkg regular expression denial of service [epel-9]
2397970 NEW CVE-2025-59343 yarnpkg: tar-fs symlink validation bypass [epel-9]

Install Failures