EUVD-2026-30551Published
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn config…
Exact source revision recorded 28 Oct 2026 06:13:02 UTC. It does not establish the source's current position. Latest evidence.
euvd · EUVD-2026-30551
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.