Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:42:12 +0000 Withdrawn: BELL-CVE-2019-10773 — CVE-2019-10773 does not affect BellSoft software https://cve.radiocsirt.org/vuln/bell-cve-2019-10773 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-10773 cnvd-2020-03727 https://cve.radiocsirt.org/vuln/cnvd-2020-03727 cnvd-2020-03727 https://cve.radiocsirt.org/vuln/cnvd-2020-03727 EUVD-2026-53935 https://cve.radiocsirt.org/vuln/euvd-2026-53935 EUVD-2026-53935 https://cve.radiocsirt.org/vuln/euvd-2026-53935 fkie_cve-2019-10773 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10773 <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10773 GHSA-5xf4-f2fq-f69j — Yarn Improper link resolution before file access (Link Following) https://cve.radiocsirt.org/vuln/ghsa-5xf4-f2fq-f69j <p><strong>Affected:</strong> npm: yarn</p> <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> <p><strong>Affected:</strong> npm: yarn</p> <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> https://cve.radiocsirt.org/vuln/ghsa-5xf4-f2fq-f69j gsd-2019-10773 https://cve.radiocsirt.org/vuln/gsd-2019-10773 gsd-2019-10773 https://cve.radiocsirt.org/vuln/gsd-2019-10773 RHSA-2020:0475 — Red Hat Security Advisory: Red Hat Quay v3.2.1 security update https://cve.radiocsirt.org/vuln/rhsa-2020:0475 <p>nodejs-yarn: Install functionality can be abused to generate arbitrary symlinks</p> <p>nodejs-yarn: Install functionality can be abused to generate arbitrary symlinks</p> https://cve.radiocsirt.org/vuln/rhsa-2020:0475 UBUNTU-CVE-2019-10773 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10773 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-yarnpkg, Ubuntu:22.04:LTS: node-yarnpkg</p> <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: node-yarnpkg, Ubuntu:22.04:LTS: node-yarnpkg</p> <p>In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted &#34;bin&#34; keys. Existing files could be overwritten depending on the current user permission set.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10773