pnpm transitive dependency alias path traversal via symlink replacement
Security AdvisoryHighpnpm
Affected:
- pnpm <10.34.0
- pnpm >=11.0.0 <11.4.0
Fixed in:
- pnpm >=10.34.0 <11.0.0
- pnpm >=11.4.0
Referenced CVEs: CVE-2026-50016 · 8.8
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.