Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-03-15	CVE-2019-15608	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Yarnpkg Yarn The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cache. network high complexity yarnpkg CWE-367	5.9

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.