ROOT-APP-NPM-CVE-2026-50016 CVE-2026-50016 in @rootio/pnpm - Patched by Root

Root has patched CVE-2026-50016 in the @rootio/pnpm package for Root:npm. Multiple fixed versions available...

@designid/tokens (0.1.1), @directus/vue-split-panel (>=0.1.0, <=0.8.2) +11 more potentially affected by CVE-2026-50016 via pnpm (>=10.0.0, <=10.33.2)

pnpm NPM version =10.0.0, =0.1.0, =1.1.1, =3.7.16, =0.1.8, =0.1.0, =2.7.2, =0.0.2, =0.2.5, =1.0.4, =1.0.7 Source cves: CVE-2026-50016 Source advisory: SNYK:JS-PNPM-17668134...

CVE-2026-50016

creationtimestamp| type| source ---|---|--- 2026-06-25 17:59:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yzms5tm2j 2026-06-27 00:35:31+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-hwx4-2j3j-g496 2026-06-30 00:41:03+00:00| seen|...