Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package turbo, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (2)
CVE-2026-45772 — CVSS 9.8 (critical): Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be…
CVE-2026-45773 — CVSS 6.5 (medium): Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and…