| High | pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraphGHSA-c59q-g84q-2gj5 · 2 Sept 2026 | < 10.34.5 · >= 11.0.0, < 11.11.0 | 11.11.0 |
| High | pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on installGHSA-vq4v-j7r6-jq4m · 2 Sept 2026 | < 10.34.5 · >= 11.0.0, < 11.11.0 | 11.11.0 |
| High | pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yamlGHSA-vx52-2968-3vc6 · 1 Sept 2026 | >= 11.0.0, < 11.11.0 · >= 10.7.0, < 10.34.5 | 11.11.0 |
| High | pnpm: pacquet trust-lockfile install can create dependency symlinks outside the projectGHSA-2rx9-3g3h-c2jv · 1 Sept 2026 | >= 12.0.0-alpha.0, < 12.0.0-alpha.5 | 12.0.0-alpha.5 |
| High | pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-configGHSA-qrv3-253h-g69c · 27 Jun 2026 | < 10.34.4 · >= 11.0.0, < 11.8.0 | 11.8.0 |
| High | pnpm: `patch-remove` could delete project-selected files outside the patches directoryGHSA-72r4-9c5j-mj57 · 27 Jun 2026 | < 10.34.4 · >= 11.0.0, < 11.7.0 | 11.7.0 |
| High | pnpm: Hoisted install imports lockfile alias outside node_modulesGHSA-fr4h-3cph-29xv · 27 Jun 2026 | < 10.34.4 · >= 11.0.0, < 11.7.0 | 11.7.0 |
| High | pnpm: `stage download` writes outside its destination directory via manifest name/version traversalGHSA-v23m-ccfg-pq9h · 26 Jun 2026 | >= 11.3.0, < 11.5.3 | 11.5.3 |
| High | pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytesGHSA-w466-c33r-3gjp · 26 Jun 2026 | < 10.34.2 · >= 11.0.0, < 11.5.3 | 11.5.3 |
| High | pnpm: Repository-controlled configDependencies can select a pacquet native install engineGHSA-gj8w-mvpf-x27x · 26 Jun 2026 | < 10.34.2 · >= 11.0.0, < 11.5.3 | 11.5.3 |
| High | pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycleGHSA-5wx6-mg75-v57r · 26 Jun 2026 | < 10.34.2 · >= 11.0.0, < 11.5.3 | 11.5.3 |
| High | pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)GHSA-rxhj-4m44-96r4 · 26 Jun 2026 | < 10.34.0 · >= 11.0.0, < 11.4.0 | 11.4.0 |
| High | pnpm: Transitive dependency alias path traversal allows project path override via symlink replacementGHSA-hwx4-2j3j-g496 · 26 Jun 2026 | < 10.34.0 · >= 11.0.0, < 11.4.0 | 11.4.0 |
| High | pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"GHSA-379q-355j-w6rj · 7 Jan 2026 | >= 10.0.0, < 10.26.0 | 10.26.0 |
| High | pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic DependenciesGHSA-7vhp-vf5g-r2fw · 7 Jan 2026 | < 10.26.0 | 10.26.0 |
| High | pnpm vulnerable to Command Injection via environment variable substitutionGHSA-2phv-j68v-wwqx · 7 Jan 2026 | >= 6.25.0, < 10.27.0 | 10.27.0 |
| High | pnpm incorrectly parses tar archives relative to specificationGHSA-5r98-f33j-g8h7 · 1 Aug 2023 | < 7.33.4 · >= 8.0.0, < 8.6.8 | 8.6.8 |
| High | Untrusted Search Path in PNPMGHSA-9m87-6fj3-c5xh · 23 Mar 2022 | < 6.15.1 | 6.15.1 |
| Moderate | pnpm: Reserved bin name deletes PNPM_HOME during global removeGHSA-4gxm-v5v7-fqc4 · 26 Jun 2026 | < 10.34.2 · >= 11.0.0, < 11.5.3 | 11.5.3 |
| Moderate | pnpm: Repository config can expand victim environment secrets into registry requests before scripts runGHSA-3qhv-2rgh-x77r · 26 Jun 2026 | < 10.34.2 · >= 11.0.0, < 11.5.3 | 11.5.3 |
| Moderate | pnpm binds unscoped user-level npm auth credentials to a repository-selected registryGHSA-cjhr-43r9-cfmw · 26 Jun 2026 | < 10.34.0 · >= 11.0.0, < 11.4.0 | 11.4.0 |
| Moderate | pnpm: Git Fetch Argument Injection via Lockfile resolution.commitGHSA-p4xf-rf54-rj3x · 26 Jun 2026 | < 10.34.0 · >= 11.0.0, < 11.4.0 | 11.4.0 |
| Moderate | pnpm Has an Integrity Check Bypass via Missing Lockfile Integrity FieldGHSA-q6j5-fjx5-2mc3 · 26 Jun 2026 | >= 11.0.0, < 11.4.0 · < 10.34.1 | 11.4.0 |
| Moderate | pnpm: Unsafe default behavior breaks integrity checkGHSA-54hh-g5mx-jqcp · 26 Jun 2026 | < 10.34.0 · >= 11.0.0, < 11.4.0 | 11.4.0 |
| Moderate | pnpm: Tarball hash of GitHub git dependencies is not stored in lockfileGHSA-hg3w-7f8c-63hp · 26 Jun 2026 | < 10.33.4 · >= 11.0.0, < 11.0.7 | 11.0.7 |
| Moderate | pnpm has Path Traversal via arbitrary file permission modification GHSA-v253-rj99-jwpq · 26 Jan 2026 | < 10.28.2 | 10.28.2 |
| Moderate | pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)GHSA-6pfh-p556-v868 · 26 Jan 2026 | < 10.28.1 | 10.28.1 |
| Moderate | pnpm has Windows-specific tarball Path TraversalGHSA-6x96-7vc8-cm3p · 26 Jan 2026 | < 10.28.1 | 10.28.1 |
| Moderate | pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.binGHSA-xpqm-wm3m-f34h · 26 Jan 2026 | < 10.28.1 | 10.28.1 |
| Moderate | pnpm has symlink traversal in file:/git dependenciesGHSA-m733-5w8f-5ggw · 26 Jan 2026 | < 10.28.2 | 10.28.2 |
| Moderate | pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwritingGHSA-8cc4-rfj6-fhg4 · 23 Apr 2025 | < 10.0.0 | 10.0.0 |
| Moderate | pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasionGHSA-vm32-9rqf-rh3r · 10 Dec 2024 | < 9.15.0 | 9.15.0 |