A vulnerability identified as problematic has been detected in yeoman environment up to 6.0.0. Affected is the function installLocalGenerators. This manipulation causes inclusion of functionality from untrusted control sphere.

The identification of this vulnerability is CVE-2026-42089. The attack can only be executed locally. There is no exploit available.

You should upgrade the affected component.