A vulnerability was found in yarnpkg Yarn up to 1.22.22 and classified as problematic. This impacts the function
setOptions of the file src/util/request-manager.js. Such manipulation leads to inefficient regular expression complexity. This vulnerability only affects products that are no longer supported by the maintainer.
This vulnerability is uniquely identified as CVE-2025-9308. Local access is required to approach this attack. No exploit exists.
