PT-2026-55948

Name of the Vulnerable Software and Affected Versions pnpm versions prior to 10.34.4 pnpm versions prior to 11.7.0 Description A crafted lockfile alias can be joined directly under a hoisted node modules directory. Traversal aliases may allow escaping that directory, while reserved aliases such a...