pnpm Path Traversal in configDependencies allows Symlink Creation

github.com 2026-07-07查看中文 →

Security AdvisoryGHSA-pnpm-path-traversalHighpnpm

Affected:

pnpm <10.34.4
pnpm >=11.0.0 <11.8.0

Fixed in:

pnpm >=10.34.4
pnpm >=11.8.0

Referenced CVEs: CVE-2026-59195 · 8.2

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Fix Null Pointer Exception in nice-select2 renderItem method 2026-07-28 XSS Vulnerability Analysis and Fix in bluzky/nice-select2 Library 2026-07-28 zip-lib Arbitrary File Write Vulnerability via ZIP Extraction Fix 2026-07-28 zip-lib Arbitrary File Write via Symbolic Link Extraction 2026-07-28 Path Traversal Vulnerability in milk-admin DocsController: Analysis and POC 2026-07-28

Offline Archive

Offline screenshot & PDF are Pro-exclusive