Skip to content

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

High severity GitHub Reviewed Published May 28, 2026 in pnpm/pnpm • Updated Jun 26, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts