@kcconfigs/commitlint (>=0.1.0-beta.2 <=0.2.0), @pnpm/cache.commands (>=1000.0.52 <=1000.0.54) +35 more potentially affected by CVE-2026-23888 via @pnpm/fetching.binary-fetcher (>=1005.0.0 <=1005.0.1)

@pnpm/fetching.binary-fetcher NPM version =1005.0.0, =0.1.0-beta.2, =1000.0.52, =1001.2.17, =1001.1.13, =1016.0.0, =1002.2.21, =1003.0.24, =1002.0.3, =1000.0.52, =1001.0.16, =1001.1.10, =1002.1.28, =1000.3.8, =1002.0.23, =1000.1.51, =1000.1.53 and more Source cves: CVE-2026-23888 Source advisory:...

CVE-2026-23888

creationtimestamp| type| source ---|---|--- 2026-01-26 15:42:53+00:00| published-proof-of-concept| https://github.com/pnpm/pnpm/security/advisories/GHSA-6pfh-p556-v868 2026-01-27 01:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdelh3443z2i...