TU
Product
turborepo
by vercel · last CVE May 15, 2026
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch

Add turborepo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45772
9.8
0%
May 15
Turborepo: Unexpected local code execution during Yarn Berry detection
Affected: >= 1.1.0, < 2.9.14
CVE-2026-46508
7.8
0%
May 15
Turborepo: VSCode Extension command injection
Affected: < 2.9.14000
CVE-2026-45773
6.5
0%
May 15
Turborepo: Login callback CSRF/session fixation
Affected: < 2.9.14
Showing 3