CVE-2026-50014

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm passes the lockfile-controlled git resolution.commit value to git fetch without a -- separator or commit-format validation. For git dependencies fetched through the shallow-fetch path, a malicious lockfile can replace the expected...

PT-2022-6672

Name of the Vulnerable Software and Affected Versions npm versions 7.9.0 through 7.13.0 npm version 7.13.0 and earlier Description The issue is related to the npm pack command ignoring root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag...

DSquare Exploit Pack: D2SEC_SYMIAO

Name| d2secsymiao ---|--- CVE| CVE-2009-1429 Exploit Pack| D2ExploitPack Description| Symantec Intel Alert Originator Service Command Execution Vulnerabilty Notes|...