CVE-2019-15608

npm/yarn CVE-2019-15608: medium 5.9

TOCTOU Race Condition in Yarn

Action: Upgrade yarn to 1.19.0 or later.

npm i yarn@1.19.0

Affected

Fixed versions

Sources

• osv: GHSA-hjxc-462x-x77j
• https://nvd.nist.gov/vuln/detail/CVE-2019-15608
• https://github.com/yarnpkg/yarn/commit/0474b8c66a8ea298f5e4dedc67b2de464297ad1c
• https://hackerone.com/reports/703138
• https://github.com/yarnpkg/yarn/blob/master/CHANGELOG.md#1190

CVE-2019-15608 · published 2022-02-09T22:49:38Z · modified 2026-09-10T03:49:12.315444432Z · JSON