Skip to content

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

High severity GitHub Reviewed Published May 28, 2026 in pnpm/pnpm • Updated Jun 26, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts