Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/yarnpkg/yarn

The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
https://github.com/yarnpkg/yarn

High

Yarn untrusted search path vulnerability
Ecosystems: npm
Packages: yarn
Source: github
Published: 11 months ago

Moderate

TOCTOU Race Condition in Yarn
Ecosystems: npm
Packages: yarn
Source: github
Published: almost 3 years ago

High

Path Traversal in Yarn
Ecosystems: npm
Packages: yarn
Source: github
Published: almost 3 years ago

High

Yarn Improper link resolution before file access (Link Following)
Ecosystems: npm
Packages: yarn
Source: github
Published: almost 5 years ago