{"action":"Upgrade pnpm to 6.15.1 or later.","affected":[{"fixed":"6.15.1","introduced":"0"}],"component":"pnpm","cve_ids":["CVE-2022-26183"],"ecosystem":"npm","epss":0.01594,"exploited":false,"fixed_versions":["6.15.1"],"ghsa_id":"GHSA-9m87-6fj3-c5xh","id":"tcs_01M5KFG75QRY7E0YMRVBMM1FPT","modified_at":"2023-11-08T04:08:53.432649Z","published_at":"2022-03-23T00:00:24Z","references":["https://osv.dev/vulnerability/GHSA-9m87-6fj3-c5xh","https://nvd.nist.gov/vuln/detail/CVE-2022-26183","https://github.com/pnpm/pnpm/commit/04b7f60861ddee8331e50d70e193d1e701abeefb","https://github.com/pnpm/pnpm","https://github.com/pnpm/pnpm/releases/tag/v6.15.1","https://www.sonarsource.com/blog/securing-developer-tools-package-managers"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-9m87-6fj3-c5xh","url":"https://osv.dev/vulnerability/GHSA-9m87-6fj3-c5xh"}],"summary":"Untrusted Search Path in PNPM"}