@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +14 more potentially affected by CVE-2026-48995 via pnpm (>=10.0.0, <=10.33.2)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.0-beta.3, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =0.3.14 and more Source cves: CVE-2026-48995 Source advisory: GHSA-HG3W-7F8C-63HP...

CVE-2026-48995

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if thi...

@agentbrowser/cli (>=1.0.0, <=1.0.1), @ai-tools/console-monkey-patch (0.0.1) +311 more potentially affected by CVE-2026-48995 via pnpm (>=0.21.0, <=10.33.2)

pnpm NPM version =0.21.0, =1.0.0, =0.0.1, =2.1.1, =0.0.36-alpha.0a210b, =0.0.1, =0.1.0, =0.1.0, =1.0.0, =5.0.0 and more Source cves: CVE-2026-48995 Source advisory: MEND:CVE-2026-48995...

CVE-2026-48995 pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if thi...