Packages / pnpm / Security

ModerateVulnerabilityGHSA-8cc4-rfj6-fhg4Published 23 Apr 2025

pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting

Affected · pnpm

  • < 10.0.0

Fixed in

10.0.0

npm install pnpm@10.0.0

  1. Affected

    0.0.1 – 9.15.9

    866 releases

  2. Fixed

    10.0.0 – 12.14.0

    164 releases, latest

1030 stable releases of pnpm, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.