File and Path Handling

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing…CVE-2020-8131Yarnpkg · 5.2% likely

   CWE-221 bounty report

2. In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem by using specially crafted "bin" keys. Existing files…CVE-2019-10773Yarnpkg · 1.5% likely

   CWE-59

3. Yarn: untrusted search pathCVE-2021-4435Yarnpkg · CVSS 7.7 · 0.3% likely

   CWE-426

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.