CRITICAL9.8npm
GHSA-3qcw-2rhx-2726· CVE-2026-45772Turbo: Unexpected local code execution during Yarn Berry detection
Modified: 9/10/2026
package
npm/turbo
pkg:npm/turbo
MEDIUMnpm
GHSA-hcf7-66rw-9f5r· CVE-2026-45773Turbo: Login callback CSRF/session fixation
Modified: 9/10/2026