CVE-2026-24131
1 advisory.
npm/pnpm CVE-2026-24131: medium
pnpm has Path Traversal via arbitrary file permission modification
Action: Upgrade pnpm to 10.28.2 or later.
npm i pnpm@10.28.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.28.2 | - |
Fixed versions
| 10.28.2 |
Sources
- osv: GHSA-v253-rj99-jwpq
- https://github.com/pnpm/pnpm/security/advisories/GHSA-v253-rj99-jwpq
- https://github.com/pnpm/pnpm/commit/17432ad5bbed5c2e77255ca6d56a1449bbcfd943
- https://github.com/pnpm/pnpm
- https://github.com/pnpm/pnpm/releases/tag/v10.28.2
CVE-2026-24131 · published · modified · JSON