Description
A vulnerability was found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The patch is identified as 97731871e674bf93bcbf29e9d3258da8685f3076. It is recommended to apply a patch to fix this issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
yarnpkg Yarn
1.22.0affected1.22.1affected1.22.2affected1.22.3affected1.22.4affected1.22.5affected1.22.6affected1.22.7affected1.22.8affected1.22.9affected1.22.10affected1.22.11affected1.22.12affected1.22.13affected1.22.14affected1.22.15affected1.22.16affected1.22.17affected1.22.18affected1.22.19affected1.22.20affected1.22.21affected1.22.22affected