Lucene search
+L

2 matches found

OSV
OSV
added 2025/04/23 2:5 p.m.7 views

GHSA-8CC4-RFJ6-FHG4 pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting

The path shortening function is used in pnpm: export function depPathToFilename depPath: string, maxLengthWithoutHash: number: string let filename = depPathToFilenameUnescapeddepPath.replace/\/:?"|/g, '+' if filename.includes'' filename = filename .replace/$/, '' .replace/\||/g, '' if...

6.5CVSS6.3AI score0.00219EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2025/04/23 2:5 p.m.14 views

pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting

The path shortening function is used in pnpm: export function depPathToFilename depPath: string, maxLengthWithoutHash: number: string let filename = depPathToFilenameUnescapeddepPath.replace/\/:?"|/g, '+' if filename.includes'' filename = filename .replace/$/, '' .replace/\||/g, '' if...

6.5CVSS6.7AI score0.00219EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder