pnpm path traversal vulnerability
PNPM is a package manager developed by the open-source project Pnpm. Prior to version 10.28.1, Pnpm had a path traversal vulnerability. This vulnerability stemmed from the tarball extraction process, which allowed for path traversal attacks. As a result, malicious packages could write files outsi...