Yarnpkg Website
1 CVEs affecting Yarnpkg Website. Latest disclosed: 2019-05-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12556 | Medium | 5.9 | 2019-05-16 | The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn release is signed by any (arbitrary) key in… |