Visit https://vercel.com/security to view the disclosure policy.
Security: vercel/turborepo
Security
SECURITY.md
-
Unexpected local code execution during Yarn Berry detectionGHSA-3qcw-2rhx-2726 published
May 14, 2026 by anthonyshewLow -
Login callback CSRF/session fixationGHSA-hcf7-66rw-9f5r published
May 14, 2026 by anthonyshewLow -
Turborepo VSCode Extension command injectionGHSA-5xc8-49mv-x4mm published
May 14, 2026 by anthonyshewHigh
Learn more about advisories related to vercel/turborepo in the GitHub Advisory Database