Lucene search
Veracode Vulnerability DatabaseVERACODE:34791HistoryMar 22, 2022 - 10:16 a.m.
Remote Code Execution (RCE)
2022-03-2210:16:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.003 Low
EPSS
Percentile
65.2%
pnpm is vulnerable to remote code execution. The vulnerability exists due an untrusted search path existing when running the application in Windows, which allows a malicious attacker to inject and execute pnpm commands.
Related
osv
osv
CVE-2022-26183
2022-03-21 22:15:07
Untrusted Search Path in PNPM
2022-03-23 00:00:24
prion
prion
Design/Logic Flaw
2022-03-21 22:15:00
nvd
nvd
CVE-2022-26183
2022-03-21 22:15:07
cve
cve
CVE-2022-26183
2022-03-21 22:15:07
cvelist
cvelist
CVE-2022-26183
2022-03-21 00:00:00
github
github
Untrusted Search Path in PNPM
2022-03-23 00:00:24