Lucene search
+L

1 matches found

CNNVD
CNNVD
added 2026/01/26 12:0 a.m.10 views

pnpm post-link vulnerability

PNPM is a package manager developed by the open-source project Pnpm. Prior to version 10.28.2, Pnpm had a backlink vulnerability. This vulnerability stemmed from the use of symbolic links when installing dependencies via file: or git:. Such practices could lead to local data leaks...

6.7CVSS5.8AI score0.00469EPSS
SaveExploits1References3
Rows per page
Query Builder