Products: 1
Vulnerabilities: 32
Known Exploited: 0
1
Critical Level Threats
18
High Level Threats
11
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-101044
pacquet before 12.0.0-alpha.5 Path Traversal via lockfile alias
Last Modified: Sep 30, 2026
Published: Sep 27, 2026
CVE-2026-101043
pnpm 11.0.0 before 11.11.0 Environment Variable Exfiltration via Proxy Settings
Last Modified: Sep 27, 2026
Published: Sep 27, 2026
CVE-2026-82393
pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install
Last Modified: Nov 03, 2026
Published: Aug 31, 2026
CVE-2026-82392
pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph
Last Modified: Sep 01, 2026
Published: Aug 31, 2026
CVE-2026-59195
pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config
Last Modified: Jul 08, 2026
Published: Jul 06, 2026
Items Per Page
