https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:49:45.599815+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244508 EUVD-2026-244508 2026-10-02T17:49:45.835232+00:00 EUVD-2026-244508 https://cve.radiocsirt.org/vuln/fkie_cve-2021-4435 fkie_cve-2021-4435 2026-10-02T17:49:45.835271+00:00

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

 https://cve.radiocsirt.org/vuln/ghsa-mpwj-fcr6-x34c GHSA-mpwj-fcr6-x34c — Yarn untrusted search path vulnerability 2026-10-02T17:49:45.835305+00:00

Affected: npm: yarn

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.

 https://cve.radiocsirt.org/vuln/gsd-2021-4435 gsd-2021-4435 2026-10-02T17:49:45.835330+00:00 gsd-2021-4435 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-4435 UBUNTU-CVE-2021-4435 2026-10-02T17:49:45.835343+00:00

Affected: Ubuntu:20.04:LTS: node-yarnpkg, Ubuntu:22.04:LTS: node-yarnpkg, Ubuntu:24.04:LTS: node-yarnpkg, Ubuntu:25.10: node-yarnpkg, Ubuntu:26.04:LTS: node-yarnpkg

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways.