Skip to content

pnpm: Git Fetch Argument Injection via Lockfile resolution.commit

Moderate severity GitHub Reviewed Published May 28, 2026 in pnpm/pnpm • Updated Jun 26, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts