CVE-2023-37478_npm_vs_pnpm

pnpm vs npm exploit This repo showcases how a difference in npm and pnpminstallation from tarballs can be exploited. The exploit is recorded in CVE-2023-37478. The javascript package constructed here claims it prints out a nice message to the user. When installed with npm, this is true. However,...

CVE-2026-59176

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

CVE-2026-59176

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the "setfunctypeversion" MCP tool in "functype-mcp-server" accepts an unconstrained "version" string using only "z.string" validation in "packages/mcp-server/src/index.ts" and interpolates it into "functype@" for...

CVE-2026-59176 Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

EUVD-2026-112078

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

CVE-2026-59176 Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

CVE-2026-59176

The functype-mcp-server (prior to version 1.4.4 ) is vulnerable to Remote Code Execution (RCE) via the set_functype_version MCP tool. The tool accepts an unconstrained version string using only z.string() validation, allowing attackers to use package-alias syntaxes (e.g., file:, npm:, URLs) to in...

CVE-2026-59176 Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

Jordan functype monorepo software supply chain issue vulnerability

Versions of Jordan functype monorepo prior to 1.4.4 contain a software supply chain vulnerability. This vulnerability arises because the setfunctype monorepoversion MCP tool utilizes only z.string to validate unconstrained version strings, then interpolates them into functype monorepo@ for use by...

CVE-2026-59176: jordanburke functype: Functype is a family of TypeScript functional programming libraries

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

@adula/create-app (>=0.2.0-alpha.1, <=1.2.0), @axiaohungry/dsh-llm-workbuddy (>=1.3.10, <=1.3.27) +30 more potentially affected by unknown CVE via pnpm (>=11.5.3, <=11.28.5)

pnpm NPM version =11.5.3, =0.2.0-alpha.1, =1.3.10, =0.3.0, =0.2.6, =0.2.0, =1.0.0-rc.2, =7.0.0, =0.1.0, =0.1.22, =0.1.0-beta.3, =0.1.0-rc.20, =0.1.0, =0.1.1 - @s3p1r0o/snoopy 0.2.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2026-0129...

WS-2026-0129

pnpm 11.0.0-alpha.4 before 11.28.6 and 12.0.0-alpha.2 before 12.12.1: pnpm publish uses the CI-provided NPMIDTOKEN OIDC trusted publishing without checking that the token's aud claim matches the selected registry, so the token is sent to whichever registry the publish targets, including one it wa...

@forgeax/game (>=0.4.0, <=0.4.2), @morlay/dsh-desktopify (>=0.2.1, <=0.2.5) +1 more potentially affected by unknown CVE via pnpm (>=12.4.2, <=12.10.1)

pnpm NPM version =12.4.2, =0.4.0, =0.2.1, =0.14.0, =1.0.2 Source cves: unknown CVE Source advisory: MEND:WS-2026-0129...

GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: vector, atuin, garage, workmux, bootc, nushell, parseable, qdrant, pnpm, lakekeeper, zed, deno...

GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: pnpm, deno, qdrant, vector, nushell, zed, atuin, parseable...

SUSE CVE-2026-101043

pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $VAR environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project's pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the...

SUSE CVE-2026-101044

pacquet, the Rust package-manager component shipped in the pnpm npm package versions =12.0.0-alpha.0 and 12.0.0-alpha.5, does not validate dependency alias/name paths taken from a lockfile before using them in install-time filesystem joins. When a user installs a project with an attacker-supplied...

CVE-2026-101044

pacquet, the Rust package-manager component shipped in the pnpm npm package versions =12.0.0-alpha.0 and 12.0.0-alpha.5, does not validate dependency alias/name paths taken from a lockfile before using them in install-time filesystem joins. When a user installs a project with an attacker-supplied...

CVE-2026-101043

pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand $VAR environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project's pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the...

CVE-2026-101044

A flaw was found in pnpm. The package manager does not properly sanitize dependency names and alias paths specified within project lockfiles. By convincing a user or build system to install a project containing a crafted lockfile, an attacker can exploit this path traversal issue to create...