Alpine/pnpm: critical 9.8
pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature "Dependency lifecycle scrip
Action: Upgrade pnpm to 10.33.4-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0 | 10.33.4-r0 | - |
Fixed versions
| 10.33.4-r0 |
Sources
published · modified · JSON