Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-fr4h-3cph-29xv
  • npm/pnpm
 pnpm: Hoisted install imports lockfile alias outside node_modules 27 Jun
  • Fix available
  • Severity - 7.1 (High)
ROOT-APP-NPM-GHSA-fr4h-3cph-29xv
  • Root:npm/@rootio/pnpm
  • Root:npm/pnpm
 GHSA-fr4h-3cph-29xv in @rootio/pnpm - Patched by Root 30 Jul
  • Fix available
CVE-2026-59196
  • github.com/pnpm/pnpm
 pnpm: hoisted install imports lockfile alias outside node_modules 06 Jul
  • Fix available
  • Severity - 7.1 (High)
CGA-mvgj-r47c-vwhq
  • Chainguard/pnpm-stage0
  • Wolfi/pnpm-stage0
 See record for full details 28 Jun
  • No fix available
  • Severity - 7.1 (High)
CGA-gmx5-qhwg-hx8w
  • Chainguard/pnpm-stage0
  • Wolfi/pnpm-stage0
 See record for full details 27 Jun
  • No fix available
  • Severity - 7.1 (High)