Vulnerabilidades en pnpm

29 resultados
Análisis Vexday

O pnpm apresenta 27 vulnerabilidades catalogadas, com 16 publicadas nos últimos 90 dias, indicando risco em evolução recente. Nenhuma vulnerabilidade crítica ou sob ataque ativo foi registrada até o momento. A fraqueza dominante é CWE-22 (path traversal), que afeta integridade e disponibilidade do gerenciador de pacotes.

CVE-2026-50014MEDIUMpnpm: Git Fetch Argument Injection via Lockfile resolution.commitEPSS 0.3%CVE-2026-55698HIGHpnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytesEPSS 0.3%CVE-2026-24131MEDIUMpnpm has Path Traversal via arbitrary file permission modificationEPSS 0.3%CVE-2024-47829MEDIUMpnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwritingEPSS 0.2%CVE-2026-55697HIGHpnpm: Repository-controlled configDependencies can select a pacquet native install engineEPSS 0.2%CVE-2026-50021MEDIUMpnpm: Integrity Check Bypass via Missing Lockfile Integrity FieldEPSS 0.2%CVE-2026-55487HIGHpnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycleEPSS 0.2%CVE-2026-48995MEDIUMpnpm: Tarball hash of GitHub git dependencies is not stored in lockfileEPSS 0.2%CVE-2026-50573MEDIUMpnpm: Unsafe default behavior breaks integrity checkEPSS 0.2%