Packages / pnpm / Security

ModerateVulnerabilityGHSA-vm32-9rqf-rh3rPublished 10 Dec 2024

pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasion

Affected · pnpm

  • < 9.15.0

Fixed in

9.15.0

npm install pnpm@9.15.0

  1. Affected

    0.0.1 – 9.14.4

    856 releases

  2. Fixed

    9.15.0 – 12.14.0

    174 releases, latest

1030 stable releases of pnpm, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.