@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +10 more potentially affected by CVE-2026-24131 via pnpm (>=0.21.0 <=10.18.3)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-24131 Source advisory: OSV:GHSA-V253-RJ99-JWPQ...

CVE-2026-24131

creationtimestamp| type| source ---|---|--- 2026-01-26 15:43:17+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-v253-rj99-jwpq 2026-01-27 01:11:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelaw2rhn2r...