# pnpm (npm) vulnerabilities 31 known vulnerabilities (16 high, 14 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 12.18.0 (Nov 5, 2026): no advisory affects it - Newest unaffected release: 12.18.0 (Nov 5, 2026), the latest release - Weekly downloads: 308M - Dependents: 10 - Releases: 500+ since 6.34.0 (Aug 3, 2022) - Registry: https://www.npmjs.com/package/pnpm - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-101043: 10.7.0 to 10.34.4 (10.34.5 is outside it); 11.0.0 to 11.10.0 (11.11.0 is outside it) - CVE-2026-82393: 6.34.0 to 10.34.4 (10.34.5 is outside it); 11.0.0 to 11.10.0 (11.11.0 is outside it) - CVE-2026-82392: 6.34.0 to 10.34.4 (10.34.5 is outside it); 11.0.0 to 11.10.0 (11.11.0 is outside it) - CVE-2026-59195: 6.34.0 to 10.34.3 (10.34.4 is outside it); 11.0.0 to 11.7.0 (11.8.0 is outside it) - CVE-2026-59196: 6.34.0 to 10.34.3 (10.34.4 is outside it); 11.0.0 to 11.6.0 (11.7.0 is outside it) - CVE-2026-59194: 6.34.0 to 10.34.3 (10.34.4 is outside it); 11.0.0 to 11.6.0 (11.7.0 is outside it) - CVE-2026-55180: 6.34.0 to 10.34.1 (10.34.2 is outside it); 11.0.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-48995: 6.34.0 to 10.33.3 (10.33.4 is outside it); 11.0.0 to 11.0.6 (11.0.7 is outside it) - CVE-2026-50017: 6.34.0 to 10.33.4 (10.34.0 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-50016: 6.34.0 to 10.33.4 (10.34.0 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-50015: 6.34.0 to 10.33.4 (10.34.0 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-50014: 6.34.0 to 10.33.4 (10.34.0 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-50573: 6.34.0 to 10.33.4 (10.34.0 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-50021: 6.34.0 to 10.34.0 (10.34.1 is outside it); 11.0.0 to 11.3.0 (11.4.0 is outside it) - CVE-2026-55700: 11.3.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-55699: 6.34.0 to 10.34.1 (10.34.2 is outside it); 11.0.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-55698: 6.34.0 to 10.34.1 (10.34.2 is outside it); 11.0.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-55697: 6.34.0 to 10.34.1 (10.34.2 is outside it); 11.0.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-55487: 6.34.0 to 10.34.1 (10.34.2 is outside it); 11.0.0 to 11.5.2 (11.5.3 is outside it) - CVE-2026-24131: 6.34.0 to 10.28.1 (10.28.2 is outside it) - CVE-2026-24056: 6.34.0 to 10.28.1 (10.28.2 is outside it) - CVE-2026-23890: 6.34.0 to 10.28.0 (10.28.1 is outside it) - CVE-2026-23889: 6.34.0 to 10.28.0 (10.28.1 is outside it) - CVE-2026-23888: 6.34.0 to 10.28.0 (10.28.1 is outside it) - CVE-2025-69262: 6.34.0 to 10.26.2 (10.27.0 is outside it) - CVE-2025-69264: 10.0.0 to 10.25.0 (10.26.0 is outside it) - CVE-2025-69263: 6.34.0 to 10.25.0 (10.26.0 is outside it) - CVE-2024-47829: 6.34.0 to 10.0.0-rc.3 (10.0.0 is outside it) - CVE-2024-53866: 6.34.0 to 9.14.4 (9.15.0 is outside it) - CVE-2023-37478: 6.34.0 to 7.33.3 (7.33.4 is outside it); 8.0.0 to 8.6.7 (8.6.8 is outside it) - CVE-2022-26183: no published release is affected Older releases aren't stored, so the earliest spans may start sooner. ## Advisories (31) ### [CVE-2026-101043](https://cve.now/CVE-2026-101043): pnpm 11.0.0 before 11.11.0 Environment Variable Exfiltration via Proxy Settings - Severity: High 8.3 - Published: Sep 27, 2026 - Affected: from 11.0.0, fixed in 11.11.0; from 10.7.0, fixed in 10.34.5. - Fixed in 10.34.5 (released Jul 10, 2026, 79 days before disclosure) and 11.11.0 (released Jul 9, 2026, 80 days before disclosure). - The latest release, 12.18.0, is not affected. - 34% of pnpm downloads last week were affected versions (114.2M). ### [CVE-2026-82393](https://cve.now/CVE-2026-82393): pnpm: A tarball dependency's manifest \`name\` escapes node\_modules → arbitrary file write/overwrite on install - Severity: High 7.5 - Published: Aug 31, 2026 - Affected: fixed in 10.34.5; from 11.0.0, fixed in 11.11.0. - Fixed in 10.34.5 (released Jul 10, 2026, 52 days before disclosure) and 11.11.0 (released Jul 9, 2026, 53 days before disclosure). - The latest release, 12.18.0, is not affected. - 46% of pnpm downloads last week were affected versions (155.6M). ### [CVE-2026-82392](https://cve.now/CVE-2026-82392): pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph - Severity: High 7.1 - Published: Aug 31, 2026 - Affected: fixed in 10.34.5; from 11.0.0, fixed in 11.11.0. - Fixed in 10.34.5 (released Jul 10, 2026, 52 days before disclosure) and 11.11.0 (released Jul 9, 2026, 53 days before disclosure). - The latest release, 12.18.0, is not affected. - 46% of pnpm downloads last week were affected versions (155.6M). ### [CVE-2026-59195](https://cve.now/CVE-2026-59195): pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node\_modules/.pnpm-config - Severity: High 8.2 - Published: Jul 6, 2026 - Affected: fixed in 10.34.4; from 11.0.0, fixed in 11.8.0. - Fixed in 10.34.4 (released Jun 18, 2026, 18 days before disclosure) and 11.8.0 (released Jun 18, 2026, 18 days before disclosure). - The latest release, 12.18.0, is not affected. - 43% of pnpm downloads last week were affected versions (147.1M). ### [CVE-2026-59196](https://cve.now/CVE-2026-59196): pnpm: hoisted install imports lockfile alias outside node\_modules - Severity: High 7.1 - Published: Jul 6, 2026 - Affected: fixed in 10.34.4; from 11.0.0, fixed in 11.7.0. - Fixed in 10.34.4 (released Jun 18, 2026, 18 days before disclosure) and 11.7.0 (released Jun 15, 2026, 21 days before disclosure). - The latest release, 12.18.0, is not affected. - 42% of pnpm downloads last week were affected versions (141.5M). ### [CVE-2026-59194](https://cve.now/CVE-2026-59194): pnpm: patch-remove could delete project-selected files outside the patches directory - Severity: High 7.1 - Published: Jul 6, 2026 - Affected: fixed in 10.34.4; from 11.0.0, fixed in 11.7.0. - Fixed in 10.34.4 (released Jun 18, 2026, 18 days before disclosure) and 11.7.0 (released Jun 15, 2026, 21 days before disclosure). - The latest release, 12.18.0, is not affected. - 42% of pnpm downloads last week were affected versions (141.5M). ### [CVE-2026-55180](https://cve.now/CVE-2026-55180): pnpm: Repository config can expand victim environment secrets into registry requests before scripts run - Severity: Medium 6.5 - Published: Jun 25, 2026 - Affected: fixed in 10.34.2; from 11.0.0, fixed in 11.5.3. - Fixed in 10.34.2 (released Jun 10, 2026, 15 days before disclosure) and 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 41% of pnpm downloads last week were affected versions (139.1M). ### [CVE-2026-48995](https://cve.now/CVE-2026-48995): pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile - Severity: Medium 4.8 - Published: Jun 25, 2026 - Affected: fixed in 10.33.4; from 11.0.0, fixed in 11.0.7. - Fixed in 10.33.4 (released May 6, 2026, 50 days before disclosure) and 11.0.7 (released May 6, 2026, 50 days before disclosure). - The latest release, 12.18.0, is not affected. - 35% of pnpm downloads last week were affected versions (118.6M). ### [CVE-2026-50017](https://cve.now/CVE-2026-50017): pnpm binds unscoped user-level npm auth credentials to a repository-selected registry - Severity: Medium 6.9 - Published: Jun 25, 2026 - Affected: fixed in 10.34.0; from 11.0.0, fixed in 11.4.0. - Fixed in 10.34.0 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (133.9M). ### [CVE-2026-50016](https://cve.now/CVE-2026-50016): pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement - Severity: High 8.8 - Published: Jun 25, 2026 - Affected: fixed in 10.34.0; from 11.0.0, fixed in 11.4.0. - Fixed in 10.34.0 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (133.9M). ### [CVE-2026-50015](https://cve.now/CVE-2026-50015): pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal) - Severity: High 7.3 - Published: Jun 25, 2026 - Affected: fixed in 10.34.0; from 11.0.0, fixed in 11.4.0. - Fixed in 10.34.0 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (133.9M). ### [CVE-2026-50014](https://cve.now/CVE-2026-50014): pnpm: Git Fetch Argument Injection via Lockfile resolution.commit - Severity: Medium 6.4 - Published: Jun 25, 2026 - Affected: fixed in 10.34.0; from 11.0.0, fixed in 11.4.0. - Fixed in 10.34.0 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (133.9M). ### [CVE-2026-50573](https://cve.now/CVE-2026-50573): pnpm: Unsafe default behavior breaks integrity check - Severity: Medium 6.8 - Published: Jun 25, 2026 - Affected: fixed in 10.34.0; from 11.0.0, fixed in 11.4.0. - Fixed in 10.34.0 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (133.9M). ### [CVE-2026-50021](https://cve.now/CVE-2026-50021): pnpm: Integrity Check Bypass via Missing Lockfile Integrity Field - Severity: Medium 6.8 - Published: Jun 25, 2026 - Affected: from 11.0.0, fixed in 11.4.0; fixed in 10.34.1. - Fixed in 10.34.1 (released May 27, 2026, 29 days before disclosure) and 11.4.0 (released May 27, 2026, 29 days before disclosure). - The latest release, 12.18.0, is not affected. - 40% of pnpm downloads last week were affected versions (134M). ### [CVE-2026-55700](https://cve.now/CVE-2026-55700): pnpm: stage download writes outside destination via manifest version traversal - Severity: High 7.1 - Published: Jun 25, 2026 - Affected: from 11.3.0, fixed in 11.5.3. - Fixed in 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 1.6% of pnpm downloads last week were affected versions (5.4M). ### [CVE-2026-55699](https://cve.now/CVE-2026-55699): pnpm: reserved bin name deletes PNPM\_HOME during global remove - Severity: Medium 6.5 - Published: Jun 25, 2026 - Affected: fixed in 10.34.2; from 11.0.0, fixed in 11.5.3. - Fixed in 10.34.2 (released Jun 10, 2026, 15 days before disclosure) and 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 41% of pnpm downloads last week were affected versions (139.1M). ### [CVE-2026-55698](https://cve.now/CVE-2026-55698): pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes - Severity: High 8.8 - Published: Jun 25, 2026 - Affected: fixed in 10.34.2; from 11.0.0, fixed in 11.5.3. - Fixed in 10.34.2 (released Jun 10, 2026, 15 days before disclosure) and 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 41% of pnpm downloads last week were affected versions (139.1M). ### [CVE-2026-55697](https://cve.now/CVE-2026-55697): pnpm: Repository-controlled configDependencies can select a pacquet native install engine - Severity: High 7.5 - Published: Jun 25, 2026 - Affected: fixed in 10.34.2; from 11.0.0, fixed in 11.5.3. - Fixed in 10.34.2 (released Jun 10, 2026, 15 days before disclosure) and 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 41% of pnpm downloads last week were affected versions (139.1M). ### [CVE-2026-55487](https://cve.now/CVE-2026-55487): pnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle - Severity: High 7.5 - Published: Jun 25, 2026 - Affected: fixed in 10.34.2; from 11.0.0, fixed in 11.5.3. - Fixed in 10.34.2 (released Jun 10, 2026, 15 days before disclosure) and 11.5.3 (released Jun 10, 2026, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 41% of pnpm downloads last week were affected versions (139.1M). ### [CVE-2026-24131](https://cve.now/CVE-2026-24131): pnpm has Path Traversal via arbitrary file permission modification - Severity: Medium 6.7 - Published: Jan 26, 2026 - Affected: fixed in 10.28.2. - Fixed in 10.28.2 (released Jan 26, 2026, the day of disclosure). - The latest release, 12.18.0, is not affected. - 25% of pnpm downloads last week were affected versions (83.3M). ### [CVE-2026-24056](https://cve.now/CVE-2026-24056): pnpm has symlink traversal in file:/git dependencies - Severity: Medium 6.7 - Published: Jan 26, 2026 - Affected: fixed in 10.28.2. - Fixed in 10.28.2 (released Jan 26, 2026, the day of disclosure). - The latest release, 12.18.0, is not affected. - 25% of pnpm downloads last week were affected versions (83.3M). ### [CVE-2026-23890](https://cve.now/CVE-2026-23890): pnpm scoped bin name Path Traversal allows arbitrary file creation outside node\_modules/.bin - Severity: Medium 6.5 - Published: Jan 26, 2026 - Affected: fixed in 10.28.1. - Fixed in 10.28.1 (released Jan 19, 2026, 7 days before disclosure). - The latest release, 12.18.0, is not affected. - 24% of pnpm downloads last week were affected versions (81.7M). ### [CVE-2026-23889](https://cve.now/CVE-2026-23889): pnpm has Windows-specific tarball Path Traversal - Severity: Medium 6.5 - Published: Jan 26, 2026 - Affected: fixed in 10.28.1. - Fixed in 10.28.1 (released Jan 19, 2026, 7 days before disclosure). - The latest release, 12.18.0, is not affected. - 24% of pnpm downloads last week were affected versions (81.7M). ### [CVE-2026-23888](https://cve.now/CVE-2026-23888): pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip) - Severity: Medium 6.5 - Published: Jan 26, 2026 - Affected: fixed in 10.28.1. - Fixed in 10.28.1 (released Jan 19, 2026, 7 days before disclosure). - The latest release, 12.18.0, is not affected. - 24% of pnpm downloads last week were affected versions (81.7M). ### [CVE-2025-69262](https://cve.now/CVE-2025-69262): pnpm vulnerable to Command Injection via environment variable substitution - Severity: High 7.6 - Published: Jan 7, 2026 - Affected: from 6.25.0, fixed in 10.27.0. - Fixed in 10.27.0 (released Dec 30, 2025, 8 days before disclosure). - The latest release, 12.18.0, is not affected. - 22% of pnpm downloads last week were affected versions (74.9M). ### [CVE-2025-69264](https://cve.now/CVE-2025-69264): pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default" - Severity: High 8.8 - Published: Jan 7, 2026 - Affected: from 10.0.0, fixed in 10.26.0. - Fixed in 10.26.0 (released Dec 15, 2025, 23 days before disclosure). - The latest release, 12.18.0, is not affected. - 11% of pnpm downloads last week were affected versions (37.3M). ### [CVE-2025-69263](https://cve.now/CVE-2025-69263): pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies - Severity: High 7.5 - Published: Jan 7, 2026 - Affected: fixed in 10.26.0. - Fixed in 10.26.0 (released Dec 15, 2025, 23 days before disclosure). - The latest release, 12.18.0, is not affected. - 22% of pnpm downloads last week were affected versions (72.9M). ### [CVE-2024-47829](https://cve.now/CVE-2024-47829): pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting - Severity: Medium 6.5 - Published: Apr 23, 2025 - Affected: fixed in 10.0.0. - Fixed in 10.0.0 (released Jan 7, 2025, 106 days before disclosure). - The latest release, 12.18.0, is not affected. - 11% of pnpm downloads last week were affected versions (35.6M). ### [CVE-2024-53866](https://cve.now/CVE-2024-53866): pnpm vulnerable to no-script global cache poisoning via overrides / \`ignore-scripts\` evasion - Severity: Medium 5.8 - Published: Dec 10, 2024 - Affected: fixed in 9.15.0. - Fixed in 9.15.0 (released Dec 6, 2024, 4 days before disclosure). - The latest release, 12.18.0, is not affected. - 4.3% of pnpm downloads last week were affected versions (14.5M). ### [CVE-2023-37478](https://cve.now/CVE-2023-37478): pnpm incorrectly parses tar archives relative to specification - Severity: High 7.5 - Published: Aug 1, 2023 - Affected: fixed in 7.33.4; from 8.0.0, fixed in 8.6.8. - Fixed in 7.33.4 (released Jul 17, 2023, 15 days before disclosure) and 8.6.8 (released Jul 17, 2023, 15 days before disclosure). - The latest release, 12.18.0, is not affected. - 0.2% of pnpm downloads last week were affected versions (557.2K). ### [CVE-2022-26183](https://cve.now/CVE-2022-26183): PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when… - Severity: Unrated - Published: Mar 21, 2022 - Affected: fixed in 6.15.1. - Fixed in 6.15.1. - The latest release, 12.18.0, is not affected. - <0.1% of pnpm downloads last week were affected versions (61.6K). --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/npm/pnpm Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.