yarnpkg

Products

ProductCVEsExploitedLatest
Yarn2–Aug 21, 2025

Exploited and recent CVEs

  • CVE-2025-9308 Low 3.3 yarnpkg Yarn request-manager.js setOptions redos 0.2%
  • CVE-2025-8262 Medium 4.3 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos 0.8%