Homepage

pnpm@9.14.3 vulnerabilities

Fast, disk space efficient package manager

  • latest version

    9.15.1

  • latest non vulnerable version

    10.0.0-rc.0

  • first published

    11 years ago

  • latest version published

    2 days ago

  • licenses detected

    • MIT
      >=0.0.0-2020811527 <0.0.1; >=0.16.0
  • View pnpm package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the pnpm package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Untrusted Search Path

    pnpm is a Fast, disk space efficient package manager

    Affected versions of this package are vulnerable to Untrusted Search Path due to mishandling of overrides and global cache settings even when ignore-scripts=true.

    How to fix Untrusted Search Path?

    Upgrade pnpm to version 9.14.4 or higher.

    <9.14.4
    Go back to all versions of this package