Threats tagged 'brew-pnpm-cve-2026-55697'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.2%	CVE-2026-55697pnpm · Repository-controlled configDependencies can select a pacquet native install engine High7.5EPSS 0.2%2026-08-13GCVE DatabaseCVE-2026-55697 A vulnerability in pnpm prior to versions 10.34.2 and 11.5.3 allows a repository to declare configDependencies that cause pnpm to execute a platform-specific pacquet binary controlled by the repository. This can lead to arbitrary code execution during package installation. The issue is fixed in versions 10.34.2 and 11.5.3. EPSS 0.2%Vulnerability #brew-pnpm-cve-2026-55697 #homebrew	GCVE Database	2026-08-13

Page 1 of 1 · 1 duplicate CVE record merged