Description
An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a yarn
1.22.13unaffected
Fedora Fedora
Default version status: unaffected
Fedora Extra Packages for Enterprise Linux
Default version status: unaffected