https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:24:48.846477+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-50314 EUVD-2026-50314 2026-10-02T23:24:48.935321+00:00 EUVD-2026-50314 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5448 fkie_cve-2019-5448 2026-10-02T23:24:48.935358+00:00

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

 https://cve.radiocsirt.org/vuln/ghsa-wqfc-cr59-h64p GHSA-wqfc-cr59-h64p — Missing Encryption of Sensitive Data in yarn 2026-10-02T23:24:48.935391+00:00

Affected: npm: yarn

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

 https://cve.radiocsirt.org/vuln/gsd-2019-5448 gsd-2019-5448 2026-10-02T23:24:48.935414+00:00 gsd-2019-5448 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-5448 Withdrawn: UBUNTU-CVE-2019-5448 2026-10-02T23:24:48.935426+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: node-yarnpkg

Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.