apk package
chainguard/pnpm
pkg:apk/chainguard/pnpm
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-53866 | — | < 9.15.0-r0 | 9.15.0-r0 | Dec 10, 2024 | The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't revalidate the data (i |
- CVE-2024-53866Dec 10, 2024affected < 9.15.0-r0fixed 9.15.0-r0
The package manager pnpm prior to version 9.15.0 seems to mishandle overrides and global cache: Overrides from one workspace leak into npm metadata saved in global cache; npm metadata from global cache affects other workspaces; and installs by default don't revalidate the data (i