CVE-2022-26183
1 advisory.
npm/pnpm CVE-2022-26183: high 8.8, EPSS 1.59%
Untrusted Search Path in PNPM
Action: Upgrade pnpm to 6.15.1 or later.
npm i pnpm@6.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.15.1 | - |
Fixed versions
| 6.15.1 |
Sources
- osv: GHSA-9m87-6fj3-c5xh
- https://nvd.nist.gov/vuln/detail/CVE-2022-26183
- https://github.com/pnpm/pnpm/commit/04b7f60861ddee8331e50d70e193d1e701abeefb
- https://github.com/pnpm/pnpm
- https://github.com/pnpm/pnpm/releases/tag/v6.15.1
- https://www.sonarsource.com/blog/securing-developer-tools-package-managers
CVE-2022-26183 · published · modified · JSON