Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/06/26 10:52 p.m.15 views

pnpm: Unsafe default behavior breaks integrity check

While it is unclear whether this should be classified as a vulnerability, it is being reported through this channel because the current behavior may represent an unsafe default. Summary pnpm install in non-frozen mode can accept new remote package content after detecting that the downloaded tarba...

8.1CVSS5.7AI score0.00155EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
added 2026/06/26 10:52 p.m.14 views

EUVD-2026-39489

pnpm: Unsafe default behavior breaks integrity check...

6.8CVSS5.8AI score0.00155EPSS
SaveExploits1References2
Rows per page
Query Builder