VYPR
← All advisories
Low severity3.3NVD Advisory· Published Aug 21, 2025· Updated Jun 17, 2026

CVE-2025-9308

CVE-2025-9308

Description

A vulnerability has been found in yarnpkg Yarn up to 1.22.22. This impacts the function setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. Local access is required to approach this attack. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • yarnpkg/Yarn3 versions
    cpe:2.3:a:yarnpkg:yarn:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:yarnpkg:yarn:*:*:*:*:*:*:*:*range: <=1.22.22
    • (no CPE)range: <=1.22.22
    • (no CPE)range: 1.22.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.