EUVD-2022-1397

Malicious code in bioql PyPI...

EUVD-2023-2219

Malicious code in bioql PyPI...

MAL-2025-47717 Malicious code in pnpm_prune_lockfile_v9 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pnpm_prune_lockfile_v9 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pnpm_prune_lockfile_v8 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47716 Malicious code in pnpm_prune_lockfile_v8 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47715 Malicious code in pnpm_lockfile_file_v9 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in pnpm_lockfile_file_v8 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-29449 Malicious code in pnpm-utils (npm)

The package pnpm-utils was found to contain malicious code...

Malicious code in pnpm-utils (npm)

The package pnpm-utils was found to contain malicious code...

Fedora 42 : nodejs-bash-language-server / nodejs-pnpm (2025-69a1acbbc0)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-69a1acbbc0 advisory. Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0 Tenable has extracted the preceding description block...

The vulnerability of the md5 function in the package manager pnpm allows a hacker to compromise data integrity.

The vulnerability of the md5 function in the package manager pnpm relates to the use of a reversible one-way hash function. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

Fedora: Security Advisory (FEDORA-2025-69a1acbbc0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-53866

The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't revalidate the data including on first...

CVE-2023-37478

pnpm is a package manager. It is possible to construct a tarball that, when installed via npm or parsed by the registry is safe, but when installed via pnpm is malicious, due to how pnpm parses tar archives. This can result in a package that appears safe on the npm registry or when installed via...

pnpm-10.11.0-1.1 on GA media (moderate)

pnpm-10.11.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15092-1 Rating: moderate Cross-References: CVE-2021-1234 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the pnpm-10.11.0-1.1...

OPENSUSE-SU-2025:15092-1 pnpm-10.11.0-1.1 on GA media

These are all security issues fixed in the pnpm-10.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 42 Update: nodejs-pnpm-10.9.0-1.fc42

A fast, disk space efficient package manager for NodeJS...

Fedora 41 : nodejs-bash-language-server / nodejs-pnpm (2025-d4cc30bdfb)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-d4cc30bdfb advisory. Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0 Tenable has extracted the preceding description block...

Fedora 40 : nodejs-bash-language-server / nodejs-pnpm (2025-f68a9b835d)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-f68a9b835d advisory. Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to version 5.6.0 Tenable has extracted the preceding description block...