https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T11:25:20.537022+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-10773 CVE-2019-10773 2026-10-02T11:25:20.580303+00:00

Affected: Yarn

In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files could be overwritten depending on the current user permission set.