Products: 1
Vulnerabilities: 30
Known Exploited: 0
1
Critical Level Threats
16
High Level Threats
11
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-82393
pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install
Last Modified: Sep 01, 2026
Published: Aug 31, 2026
CVE-2026-82392
pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph
Last Modified: Sep 01, 2026
Published: Aug 31, 2026
CVE-2026-59195
pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config
Last Modified: Jul 08, 2026
Published: Jul 06, 2026
CVE-2026-59196
pnpm: hoisted install imports lockfile alias outside node_modules
Last Modified: Jul 06, 2026
Published: Jul 06, 2026
CVE-2026-59194
pnpm: patch-remove could delete project-selected files outside the patches directory
Last Modified: Jul 08, 2026
Published: Jul 06, 2026
Items Per Page
