Lucene search

K
osvGoogleOSV:GHSA-9M87-6FJ3-C5XH
HistoryMar 23, 2022 - 12:00 a.m.

Untrusted Search Path in PNPM

2022-03-2300:00:24
Google
osv.dev
10

0.003 Low

EPSS

Percentile

65.2%

PNPM prior to v6.15.1 was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute PNPM commands in a directory containing malicious content. This vulnerability occurs when the application is ran on Windows OS.

CPENameOperatorVersion
pnpmlt6.15.1

0.003 Low

EPSS

Percentile

65.2%

Related for OSV:GHSA-9M87-6FJ3-C5XH