Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/01/26 12:00 a.m.•21 views

pnpm post-link vulnerability

PNPM is a package manager developed by the open-source project Pnpm. Prior to version 10.28.2, Pnpm had a backlink vulnerability. This vulnerability stemmed from the use of symbolic links when installing dependencies via file: or git:. Such practices could lead to local data leaks...

6.7CVSS6.1AI score0.00535EPSS
SaveExploits1References3
Rows per page
Query Builder