tocsin

Alpine/pnpm: high 8.8

pnpm is a package manager. Versions 10.26.2 and below store HTTP tarball dependencies (and git-hosted tarballs) in the lockfile without integrity hashes. This allows the remote server to serve differe

Action: Upgrade pnpm to 10.33.4-r0 or later.

Affected

introducedfixedlast affected
010.33.4-r0-

Fixed versions

10.33.4-r0

Sources

published · modified · JSON