https://nvd.nist.gov/vuln/detail/CVE-2021-41163 (cherry picked from commit 44ffcb836239ef0e608728223166740b632ce994)
yarn2nix