Threats Tagged 'brew-pnpm-cve-2026-82392'

View all threats tagged with 'brew-pnpm-cve-2026-82392'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Instant breach scanning across billions of leaked records. Free tier available.

Filter Threats

Narrow down the results by type, severity, or affected countries

Type

Severity

Country

Tag

Time Range

Sort By

Active filters (1):Tag: brew-pnpm-cve-2026-82392

Click on any threat for detailed analysis and mitigation recommendations


pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph (CVE-2026-82392)CVE-2026-82392 0 A path traversal vulnerability in pnpm prior to 10.34.5 and from 11.0.0 until 11.11.0 allows attacker-controlled package names in pnpm-lock.yaml to write files outside the node_modules directory during installation. This can lead to arbitrary code execution if lifecycle scripts are permitted. The issue is fixed in versions 10.34.5 and 11.11.0. HighVulnerability#gcve #osv #brew-pnpm-cve-2026-82392 Join the discussion	GCVE Database	09/03/2026, 09:51:06 UTC Added: 10/04/2026, 21:10:06 UTC

Showing 1 to 1 of 1 result

Filters:Tag: brew-pnpm-cve-2026-82392

Page 1 of 1

OffSeq TrainingCredly Certified

Technical5-day eLearningPECB Accredited