yarnpkg
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Yarn | 2 | – | Aug 21, 2025 |
Exploited and recent CVEs
- CVE-2025-9308 yarnpkg Yarn request-manager.js setOptions redos 0.2%
- CVE-2025-8262 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos 0.8%
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Yarn | 2 | – | Aug 21, 2025 |