Vendor
pnpm
- CVEs tracked · all time
- 1
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- article · all time
- 1
One article so farA coverage timeline appears once a second report names pnpm. Until then: SecurityWeek, Tue 27 Jan, 14:10 UTC.
Products: pnpm
CVEs
1 CVECVE-2025-69263pnpm Lockfile Integrity Bypass Allows Remote Dynamic DependenciesCVSSUnrated–Not in KEV0.5%EPSS1article
- ‘PackageGate’ Flaws Open JavaScript Ecosystem to Supply Chain AttacksSecurityWeek · first in our coverage