pnpm vulnerabilities (Alpine)
9 vulnerabilities.
-
pnpmAlpine node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal 8.2 High -
pnpmAlpine pnpm has Path Traversal via arbitrary file permission modification 6.7 Medium -
pnpmAlpine pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip) 6.5 Medium -
pnpmAlpine pnpm has Windows-specific tarball Path Traversal 6.5 Medium -
pnpmAlpine pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin 6.5 Medium -
pnpmAlpine pnpm has symlink traversal in file:/git dependencies 6.7 Medium -
pnpmAlpine pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default" 8.8 High -
pnpmAlpine pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies 7.5 High -
pnpmAlpine pnpm vulnerable to Command Injection via environment variable substitution 7.6 High