yarnpkg Yarn

• CVE-2025-9308 Low 3.3 yarnpkg Yarn request-manager.js setOptions redos 0.2%
• CVE-2025-8262 Medium 4.3 yarnpkg Yarn hosted-git-resolver.js explodeHostedGitFragment redos 0.8%