Directory Traversal

Overview @pnpm/installing.deps-resolver is a Resolves dependency graph of a package Affected versions of this package are vulnerable to Directory Traversal via the resolvePeersOfNode package path construction in resolvePeers.ts and related isolated-linker import-target joins. An attacker can writ...

@pnpm/building.commands (>=1100.0.0, <=1100.1.3), @pnpm/deps.compliance.commands (>=1100.0.0, <=1101.3.3) +10 more potentially affected by CVE-2026-59196 via @pnpm/installing.deps-resolver (>=1100.0.0, <=1100.2.1)

@pnpm/installing.deps-resolver NPM version =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =1100.0.0, =0.0.1, =0.0.21 Source cves: CVE-2026-59196 Source advisory: SNYK:JS-PNPMINSTALLINGDEPSRESOLVER-17660540...