[ Vendor · 2 CVEs ]
pnpm
CVEs affecting pnpm published in the last 30 days, plus any pnpm CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101044 | 27 Sep 2026 | CVSS 7.1 | pnpmpacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.5, does not validate… | |
| CVE-2026-101043 | 27 Sep 2026 | CVSS 7.4 | pnpmpnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and… |