Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/cafs | Versions <7.0.5
Has fix
npmPublished 1 Aug 2023
- M
Insertion of Sensitive Information Into Sent DataCVE-2026-101043
Affects @pnpm/config | Versions >=1002.5.3 <1004.11.6
Has fix
npmPublished 2 Sept 2026
- H
Unsafe Dependency ResolutionCVE-2026-55697
Affects @pnpm/config | Versions <1004.11.3
Has fix
npmPublished 7 Jul 2026
- H
External Control of File Name or PathCVE-2026-59194
Affects @pnpm/config.deps-installer | Versions *
No fix available
npmPublished 28 Jun 2026
- H
Protection Mechanism FailureCVE-2025-69264
Affects @pnpm/core | Versions <1015.0.0
Has fix
npmPublished 8 Jan 2026
- H
Directory TraversalCVE-2026-82392
Affects @pnpm/deps.graph-builder | Versions <1002.3.17>=1100.0.0 <1100.0.19
Has fix
npmPublished 1 Sept 2026
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/exe | Versions <7.33.4>=8.0.0 <8.6.8
Has fix
npmPublished 1 Aug 2023
- M
Untrusted Search PathCVE-2026-23888
Affects @pnpm/fetching.binary-fetcher | Versions <1005.0.2
Has fix
npmPublished 27 Jan 2026
- H
External Control of File Name or PathCVE-2026-59196
Affects @pnpm/fs.symlink-dependency | Versions <1100.0.9
Has fix
npmPublished 27 Jun 2026
- H
External Control of File Name or PathCVE-2026-59196
Affects @pnpm/installing.deps-installer | Versions <1101.9.0
Has fix
npmPublished 27 Jun 2026
- H
Directory TraversalCVE-2026-82393
Affects @pnpm/installing.deps-resolver | Versions <1100.2.7
Has fix
npmPublished 1 Sept 2026
- H
External Control of File Name or PathCVE-2026-59196
Affects @pnpm/installing.deps-resolver | Versions <1100.2.2
Has fix
npmPublished 27 Jun 2026
- H
External Control of File Name or PathCVE-2026-59196
Affects @pnpm/installing.deps-restorer | Versions <1101.1.11
Has fix
npmPublished 27 Jun 2026
- H
Directory TraversalCVE-2026-59195
Affects @pnpm/installing.env-installer | Versions <1102.0.0
Has fix
npmPublished 27 Jun 2026
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/linux-arm64 | Versions <7.33.4>=8.0.0 <8.6.8
Has fix
npmPublished 1 Aug 2023
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/linux-x64 | Versions <7.33.4>=8.0.0 <8.6.8
Has fix
npmPublished 1 Aug 2023
- H
Improper Validation of Integrity Check ValueCVE-2026-50021
Affects @pnpm/lockfile.utils | Versions <1004.0.4
Has fix
npmPublished 28 Jun 2026
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/macos-arm64 | Versions <7.33.4>=8.0.0 <8.6.8
Has fix
npmPublished 1 Aug 2023
- H
Access Control BypassCVE-2023-37478
Affects @pnpm/macos-x64 | Versions <7.33.4>=8.0.0 <8.6.8
Has fix
npmPublished 1 Aug 2023
- H
Command InjectionCVE-2025-69262
Affects @pnpm/npm-conf | Versions <3.0.2
Has fix
npmPublished 8 Jan 2026
- M
Relative Path TraversalCVE-2026-23890
Affects @pnpm/package-bins | Versions <1000.0.16
Has fix
npmPublished 27 Jan 2026
- H
Directory TraversalCVE-2026-24131
Affects @pnpm/package-bins | Versions <1000.0.17
Has fix
npmPublished 27 Jan 2026
- L
Arbitrary File WriteCVE-2019-10773
Affects @pnpm/package-bins | Versions <4.0.1
Has fix
npmPublished 13 Dec 2019
- H
Resources Downloaded over Insecure ProtocolCVE-2025-69263
Affects @pnpm/package-store | Versions <1007.1.0
Has fix
npmPublished 8 Jan 2026
- H
External Control of File Name or PathCVE-2026-55700
Affects @pnpm/releasing.commands | Versions <1100.4.2
Has fix
npmPublished 28 Jun 2026
- M
Symlink AttackCVE-2026-24056
Affects @pnpm/store.cafs | Versions <1000.1.3
Has fix
npmPublished 27 Jan 2026
- M
Directory TraversalCVE-2026-23889
Affects @pnpm/store.cafs | Versions <1000.1.2
Has fix
npmPublished 27 Jan 2026