Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-5448

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wqfc-cr59-h64p

Missing Encryption of Sensitive Data in yarn Yarn before 1.17.3 is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.

gitlab/npm/yarn/CVE-2019-5448

Cryptographic Issues Yarn is vulnerable to Missing Encryption of Sensitive Data due to HTTP URLs in lockfile causing unencrypted authentication data to be sent over the network.