Known Vulnerabilities for products from Pnpm
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Pnpm".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55700 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-55699 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-55698 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2026-55697 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2026-55487 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-55180 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-50573 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2026-50021 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2026-50017 json | Not Provided | 2026-06-25 | 2026-06-25 | |
| CVE-2026-50016 json | Not Provided | 2026-06-25 | 2026-06-26 | |
| CVE-2025-69263 json | pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies (and git-hosted tarballs) in the lockfi... | Not Provided | 2026-01-07 | 2026-06-22 |
| CVE-2025-69262 json | pnpm is a package manager. Versions 6.25.0 through 10.26.2 have a Command Injection vulnerability when using environment vari... | Not Provided | 2026-01-07 | 2026-06-22 |
| CVE-2024-53866 json | The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace ... | Not Provided | 2024-12-10 | 2026-06-22 |
| CVE-2024-47829 json | pnpm is a package manager. Prior to version 10.0.0, the path shortening function uses the md5 function as a path shortening c... | Not Provided | 2025-04-23 | 2026-06-22 |
| CVE-2023-37478 json | pnpm is a package manager. It is possible to construct a tarball that, when installed via npm or parsed by the registry is sa... | 9.8 - CRITICAL | 2023-08-01 | 2023-08-04 |
| CVE-2022-26183 json | PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unexpecte... | 8.8 - HIGH | 2022-03-21 | 2023-11-09 |