@conglomerate/weaver (>=2.1.1 <=2.6.1), @derivative/derive (>=0.1.0 <=0.1.1) +10 more potentially affected by CVE-2026-23889 via pnpm (>=0.21.0 <=10.18.3)

pnpm NPM version =0.21.0, =2.1.1, =0.1.0, =0.1.0, =3.7.16, =2.3.0, =0.1.0, =0.2.7, =1.0.4, =1.0.7 Source cves: CVE-2026-23889 Source advisory: OSV:GHSA-6X96-7VC8-CM3P...

CVE-2026-23889

creationtimestamp| type| source ---|---|--- 2026-01-26 15:42:36+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-6x96-7vc8-cm3p 2026-01-27 02:07:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdeofuf7p72g...