CVE-2026-55699 | pnpm up to 10.34.1/11.5.2 path traversal

June 25, 2026 Yanac

A vulnerability, which was classified as critical, has been found in pnpm up to 10.34.1/11.5.2. Impacted is an unknown function. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-55699. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More