Skip to content

pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin

Moderate severity GitHub Reviewed Published Jan 26, 2026 in pnpm/pnpm • Updated Jan 29, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts