buildpacks-yarn-install-2.7.10

Direct Vulnerabilities

Known vulnerabilities in the buildpacks-yarn-install-2.7.10 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Improper Validation of Integrity Check Value

*
  • L
Improper Privilege Management

*
  • L
Resource Exhaustion

*
  • L
CVE-2026-94447

*
  • L
CVE-2026-94444

*
  • L
CVE-2026-78660

*
  • L
CVE-2026-94440

*
  • L
CVE-2026-94439

*
  • L
CVE-2026-94448

*
  • L
CVE-2026-78659

*
  • L
CVE-2026-56866

*
  • L
CVE-2026-56857

*
  • L
CVE-2026-78667

*
  • L
CVE-2026-97032

*
  • L
CVE-2026-78669

*
  • L
Resource Exhaustion

*
  • L
CVE-2026-97030

*
  • L
CVE-2026-78663

*
  • L
CVE-2026-97031

*
  • L
CVE-2026-56851

*
  • L
Resource Exhaustion

*
  • L
Information Exposure

*
  • L
Resource Exhaustion

*
  • L
Improper Handling of Case Sensitivity

*
  • L
Improper Validation of Array Index

*
  • L
CVE-2026-78662

*
  • L
CVE-2026-56855

*
  • L
Resource Exhaustion

*
  • L
CVE-2026-56854

*
  • L
Race Condition

*
  • L
CVE-2026-56858

*
  • L
CVE-2026-56853

*
  • L
CVE-2026-33818

*
  • L
CVE-2026-56864

*
  • L
CVE-2026-56859

*
  • L
CVE-2026-56860

*
  • L
CVE-2026-56862

*
  • L
CVE-2026-56865

*
  • L
Link Following

*
  • L
Directory Traversal

*
  • L
GHSA-259r-337f-4rfw

*
  • L
CVE-2026-56852

*
  • L
CVE-2026-46600

*
  • L
GHSA-hrxh-6v49-42gf

*
  • L
CVE-2026-39822

*
  • L
CVE-2026-42505

*
  • L
GO-2026-5932

*
  • H
CVE-2022-30322

*
  • C
CVE-2022-26945

*
  • L
Uncontrolled Memory Allocation

*
  • H
Directory Traversal

*
  • L
GHSA-xmrv-pmrh-hhx2

*
  • H
CVE-2022-30323

*
  • L
CVE-2026-47262

*
  • L
Improper Input Validation

*
  • L
CVE-2026-50195

*
  • L
Improper Input Validation

*
  • L
Symlink Following

*
  • H
CVE-2025-15558

*
  • L
CVE-2026-46598

*
  • L
Improper Verification of Cryptographic Signature

*
  • L
CVE-2026-39824

*
  • L
CVE-2026-46595

*
  • L
Cross-site Scripting (XSS)

*
  • L
GHSA-w5pp-99ch-qj29

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
Missing Authorization

*
  • L
Incorrect Type Conversion or Cast

*
  • L
CVE-2026-39821

*
  • L
CVE-2026-27145

*
  • L
Integer Overflow or Wraparound

*
  • L
CVE-2026-42507

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
Improper Certificate Validation

*
  • C
Improper Encoding or Escaping of Output

*
  • L
Improper Enforcement of Message Integrity During Transmission in a Communication Channel

*
  • L
Improper Certificate Validation

*
  • L
Improper Privilege Management

*
  • L
Directory Traversal

*
  • L
Missing Authorization

*
  • L
CVE-2026-42504

*
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • L
Resource Exhaustion

*
  • L
Out-of-Bounds

*
  • L
Improper Restriction of Rendered UI Layers or Frames

*
  • L
Improper Certificate Validation

*
  • L
Deserialization of Untrusted Data

*
  • H
Incorrect Behavior Order: Validate Before Canonicalize

*
  • L
Directory Traversal

*
  • L
Uncontrolled Recursion

*