Pnpm vulnerabilities
31 CVEs and advisories name Pnpm as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-101044pacquet before 12.0.0-alpha.5 Path Traversal via lockfile alias
- CVE-2026-101043pnpm 11.0.0 before 11.11.0 Environment Variable Exfiltration via Proxy Settings
- CVE-2026-82393pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install
- CVE-2026-82392pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph
- CVE-2026-59195pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config
- CVE-2026-59196pnpm: hoisted install imports lockfile alias outside node_modules
- CVE-2026-59194pnpm: patch-remove could delete project-selected files outside the patches directory
- CVE-2026-55180pnpm: Repository config can expand victim environment secrets into registry requests before scripts run
- CVE-2026-48995pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile
- CVE-2026-50017pnpm binds unscoped user-level npm auth credentials to a repository-selected registry
- CVE-2026-50016pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement
- CVE-2026-50015pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)
- CVE-2026-50014pnpm: Git Fetch Argument Injection via Lockfile resolution.commit
- CVE-2026-50573pnpm: Unsafe default behavior breaks integrity check
- CVE-2026-50021pnpm: Integrity Check Bypass via Missing Lockfile Integrity Field
- CVE-2026-55700pnpm: stage download writes outside destination via manifest version traversal
- CVE-2026-55699pnpm: reserved bin name deletes PNPM_HOME during global remove
- CVE-2026-55698pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes
- CVE-2026-55697pnpm: Repository-controlled configDependencies can select a pacquet native install engine
- CVE-2026-55487pnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle
- CVE-2026-24131pnpm has Path Traversal via arbitrary file permission modification
- CVE-2026-24056pnpm has symlink traversal in file:/git dependencies
- CVE-2026-23890pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
- CVE-2026-23889pnpm has Windows-specific tarball Path Traversal
- CVE-2026-23888pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
- CVE-2025-69262pnpm vulnerable to Command Injection via environment variable substitution
- CVE-2025-69264pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
- CVE-2025-69263pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies
- CVE-2024-47829pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting
- CVE-2024-53866pnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion