Lucene search

K
osvGoogleOSV:GHSA-8MFC-V7WV-P62G
HistoryFeb 09, 2022 - 10:43 p.m.

Path Traversal in Yarn

2022-02-0922:43:37
Google
osv.dev
10

0.003 Low

EPSS

Percentile

70.8%

Arbitrary filesystem write vulnerability in Yarn 1.21.1 and earlier allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install a malicious package.

CPENameOperatorVersion
yarnlt1.22.0