Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2025/04/23 2:05 p.m.18 views

pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting

The path shortening function is used in pnpm: export function depPathToFilename depPath: string, maxLengthWithoutHash: number: string let filename = depPathToFilenameUnescapeddepPath.replace/\/:?"|/g, '+' if filename.includes'' filename = filename .replace/$/, '' .replace/\||/g, '' if...

6.5CVSS6.7AI score0.00221EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/04/23 2:05 p.m.9 views

GHSA-8CC4-RFJ6-FHG4 pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting

The path shortening function is used in pnpm: export function depPathToFilename depPath: string, maxLengthWithoutHash: number: string let filename = depPathToFilenameUnescapeddepPath.replace/\/:?"|/g, '+' if filename.includes'' filename = filename .replace/$/, '' .replace/\||/g, '' if...

6.5CVSS6.3AI score0.00221EPSS
SaveExploits1References3
Rows per page
Query Builder