CVE-2026-59176 Functype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import

Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string using only z.string validation in packages/mcp-server/src/index.ts and interpolates it into functype@ for pnpm add...

NPM: functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

NPM: functype-mcp-server: MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import vulnerability discovered by ? in WordPress Npm functype-mcp-server versions = 1.4.3...

GHSA-WCJJ-9M6G-2FR2 functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

MCP setfunctypeversion Package Alias RCE via Unsanitized pnpm install + Dynamic Import Summary The setfunctypeversion MCP tool in functype-mcp-server accepts an unconstrained version string, interpolates it directly into an npm package specifier functype@, and installs it via pnpm add without any...

PT-2026-89213

Name of the Vulnerable Software and Affected Versions functype-mcp-server versions prior to 1.4.4 Description The set functype version MCP tool in functype-mcp-server allows for Remote Code Execution RCE because it accepts an unconstrained version string and interpolates it into a pnpm add comman...

Directory Traversal

Overview @pnpm/installing.deps-resolver is a Resolves dependency graph of a package Affected versions of this package are vulnerable to Directory Traversal via the resolvePeersOfNode package path construction in resolvePeers.ts and related isolated-linker import-target joins. An attacker can writ...

pnpm binds unscoped user-level npm auth credentials to a repository-selected registry

Summary pnpm can send user-level unscoped npm authentication credentials to a registry chosen by a repository-local .npmrc file. In the reproduced case, the user's npm config contains a default registry and an unscoped authToken. The repository does not provide a token-bearing auth line. It only...

CVE-2026-50016

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During install, pnpm later uses that alias as a filesystem path when linking dependency nodes. As a result, a registry package can...

CVE-2026-50021: Improper Validation of Integrity Check Value

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's tarball extraction worker skips integrity verification when the integrity field is absent from the lockfile resolution. If an attacker can both modify pnpm-lock.yaml to remove the integrity: field and cause the referenced registry URL...

CVE-2026-50573: Insufficient Verification of Data Authenticity

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm install in non-frozen mode can accept new remote package content after detecting that the downloaded tarball does not match the integrity recorded in pnpm-lock.yaml. When a package is already locked with an integrity value, and the...

CVE-2026-50015: Improper Limitation of a Pathname to a Restricted Directory

pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm's patch application pipeline @pnpm/patch-package performs no path validation on file paths extracted from .patch files. An attacker who contributes a malicious patch file via a pull request can write attacker-controlled content to or...

Protection Mechanism Failure

Overview Affected versions of this package are vulnerable to Protection Mechanism Failure during pnpm install. An attacker can execute arbitrary code by introducing a malicious git-hosted dependency that leverages prepare, prepublish, or prepack scripts during the fetch phase. Remediation Upgrade...

CVE-2025-69264

pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature "Dependency lifecycle scripts execution disabled by default". While pnpm v10 blocks postinstall scripts via the...