Red Hat JBoss Enterprise Application Platform 8/pnpm
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| pnpm: Reserved bin name deletes PNPM_HOME during global remove | pnpmRed Hat AMQ Broker 7/pnpm | npmRed Hat | Medium | Fix reported | |
| pnpm: Repository config can expand victim environment secrets into registry requests before scripts run | pnpmRed Hat AMQ Broker 7/pnpm | npmRed Hat | Medium | Fix reported | |
| pnpm binds unscoped user-level npm auth credentials to a repository-selected registry | pnpmRed Hat AMQ Broker 7/pnpm | npmRed Hat | Medium | Fix reported | |
| pnpm: Unsafe default behavior breaks integrity check | pnpmRed Hat AMQ Broker 7/pnpm | npmRed Hat | Medium | Fix reported | |
| pnpm: Git Fetch Argument Injection via Lockfile resolution.commit | pnpmRed Hat AMQ Broker 7/pnpm | npmRed Hat | Medium | Fix reported |