CVE-2025-8262

Mô tả

Tham khảo

• yarnpkg/yarn#9199 · Exploit
• yarnpkg/yarn#9199 · Patch
• vuldb.com · Permissions Required
• vuldb.com · Third Party Advisory
• vuldb.com · Third Party Advisory

Lỗ hổng khác của yarn

• CVE-2025-9308TRUNG BÌNH 5.5A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. …
• CVE-2021-4435CAO 7.8An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled c…
• CVE-2019-15608TRUNG BÌNH 5.9The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cac…
• CVE-2020-8131CAO 7.5Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead …
• CVE-2019-10773CAO 7.8In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specia…