Packages / pnpm / Security

HighVulnerabilityGHSA-5r98-f33j-g8h7Published 1 Aug 2023

pnpm incorrectly parses tar archives relative to specification

Affected · pnpm

  • < 7.33.4
  • >= 8.0.0, < 8.6.8

Fixed in

8.6.8

npm install pnpm@8.6.8

  1. Affected

    0.0.1 – 7.33.3

    759 releases

  2. Fixed

    7.33.4 – 7.33.7

    4 releases

  3. Affected

    8.0.0 – 8.6.7

    17 releases

  4. Fixed

    8.6.8 – 12.14.0

    250 releases, latest

1030 stable releases of pnpm, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.