Skip to content
OpenAdvisories

Package · Wolfi

pnpm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.8
    CVE-2024-53866

    pnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion

    The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't r…

    pnpm pnpm pnpm-stage0 pnpm Wolfi npm