{"id":"CGA-wgf6-qq95-3r43","modified":"2026-07-17T19:24:57.387044736Z","published":"2026-06-17T15:26:08Z","upstream":["CVE-2019-10773","GHSA-5xf4-f2fq-f69j"],"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HIZW4NZVV5QY5WWGW2JRP3FHYKZ6ZJ5/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITY5BC63CCC647DFNUQRQ5AJDKUKUNBI/"},{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-JS-YARN-537806%2C"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0475"},{"type":"FIX","url":"https://github.com/yarnpkg/yarn/commit/039bafd74b7b1a88a53a54f8fa6fa872615e90e7"},{"type":"EVIDENCE","url":"https://blog.daniel-ruf.de/critical-design-flaw-npm-pnpm-yarn/"},{"type":"EVIDENCE","url":"https://github.com/yarnpkg/yarn/issues/7761#issuecomment-565493023"}],"affected":[{"package":{"name":"yarn","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/yarn?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-r0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:apk/yarn","latest_event_status":"fixed","latest_event_timestamp":"2026-06-17T15:26:08Z","architecture":"x86_64","component_name":"yarn","component_version":"","component_type":"apk","component_location":"/.PKGINFO"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgf6-qq95-3r43.json"}},{"package":{"name":"yarn","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/yarn?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-r0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:apk/yarn","latest_event_status":"fixed","latest_event_timestamp":"2026-06-17T15:26:08Z","architecture":"x86_64","component_name":"yarn","component_version":"","component_type":"apk","component_location":"/.PKGINFO"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wgf6-qq95-3r43.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}