Średnia

pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

Ujawniono: 26.06.2026
Aktualizacja: 11.10.2026 10:22

Summary

A malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile.

Details

The lockfile does not store the hash of the dependencies from https://codeload.github.com

This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies.

PoC

bash

> pnpm -v     
10.28.2

Given the following package.json:

{
  "dependencies": {
    "add": "git://github.com/dsherret/npm-git-dep.git#b3eeb9b"
  }
}

This produces a lockfile like so:

yaml

lockfileVersion: '9.0'

settings:
  autoInstallPeers: true
  excludeLinksFromLockfile: false

importers:

  .:
    dependencies:
      add:
        specifier: git://github.com/dsherret/npm-git-dep.git#b3eeb9b
        version: https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b

packages:

  add@https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b:
    resolution: {tarball: https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b}
    version: 1.0.0

snapshots:

  add@https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b: {}

Notice that there is no hash. The b3eeb9b is not sufficient because I can configure my machine to resolve a compromised tarball from that url (I tested it out and pnpm just installs it).

Impact

Anyone relying on github git dependencies.

Czego dotyczy

Kliknij technologię, aby zobaczyć wszystkie dotyczące jej podatności.

Platforma	Paczka	Podatne wersje	Poprawka w wersji
Paczka npm	pnpm	< 10.33.4, >= 11.0.0, < 11.0.7	10.33.4, 11.0.7

Odnośniki

Ocena CVSS -

Wektor CVSS: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Słabość (CWE): CWE-353
Platforma: npm
Paczka: pnpm
Ujawniono: 26.06.2026
Aktualizacja: 11.10.2026 10:22

Źródła i licencje

OSV / GitHub Advisory Database - GHSA-hg3w-7f8c-63hp - CC BY 4.0

Historia podatności: pnpm

Wszystkie opisane podatności tej paczki (Paczka npm), od najnowszej. Widać, czy to jednorazowa wpadka, czy paczka, której trzeba pilnować.

Wszystkie (32) w archiwum

Wszystkich wpisów: 32
Pierwsza → ostatnia: 03.2022 09.2026
Bez poprawki: 0
Wykorzystywana w atakach: 0

Rozkład istotności

Wysoka 18
Średnia 14

Ujawnienia w latach

2022: 1
2023: 1
2024: 1
2025: 1
2026: 28

02.09.2026

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph

Wysoka · 7.1 CVE-2026-82392 < 10.34.5, >= 11.0.0, < 11.11.0 10.34.5, 11.11.0
02.09.2026

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install

Wysoka · 7.5 CVE-2026-82393 < 10.34.5, >= 11.0.0, < 11.11.0 10.34.5, 11.11.0
01.09.2026

pnpm: Environment secrets exfiltrated via env-placeholder expansion in proxy settings read from an untrusted pnpm-workspace.yaml

Wysoka · 7.4 CVE-2026-101043 >= 11.0.0, < 11.11.0, >= 10.7.0, < 10.34.5 11.11.0, 10.34.5
01.09.2026

pnpm: pacquet trust-lockfile install can create dependency symlinks outside the project

Wysoka · 7.1 ghsa-2rx9-3g3h-c2jv >= 12.0.0-alpha.0, < 12.0.0-alpha.5 12.0.0-alpha.5
27.06.2026

pnpm: Path traversal in configDependencies env lockfile allows symlink creation outside node_modules/.pnpm-config

Wysoka · 8.2 CVE-2026-59195 < 10.34.4, >= 11.0.0, < 11.8.0 10.34.4, 11.8.0
27.06.2026

pnpm: `patch-remove` could delete project-selected files outside the patches directory

Wysoka · 7.1 CVE-2026-59194 < 10.34.4, >= 11.0.0, < 11.7.0 10.34.4, 11.7.0
27.06.2026

pnpm: Hoisted install imports lockfile alias outside node_modules

Wysoka · 7.1 CVE-2026-59196 < 10.34.4, >= 11.0.0, < 11.7.0 10.34.4, 11.7.0
26.06.2026

pnpm: `stage download` writes outside its destination directory via manifest name/version traversal

Wysoka · 7.1 CVE-2026-55700 >= 11.3.0, < 11.5.3 11.5.3
26.06.2026

pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes

Wysoka · 8.8 CVE-2026-55698 < 10.34.2, >= 11.0.0, < 11.5.3 10.34.2, 11.5.3
26.06.2026

pnpm: Repository-controlled configDependencies can select a pacquet native install engine

Wysoka · 7.5 CVE-2026-55697 < 10.34.2, >= 11.0.0, < 11.5.3 10.34.2, 11.5.3
26.06.2026

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

Wysoka · 7.5 CVE-2026-55487 < 10.34.2, >= 11.0.0, < 11.5.3 10.34.2, 11.5.3
26.06.2026

pnpm Vulnerable to Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)

Wysoka · 7.3 CVE-2026-50015 < 10.34.0, >= 11.0.0, < 11.4.0 10.34.0, 11.4.0
26.06.2026

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

Wysoka · 8.8 CVE-2026-50016 < 10.34.0, >= 11.0.0, < 11.4.0 10.34.0, 11.4.0
26.06.2026

pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile ten wpis

Średnia CVE-2026-48995 < 10.33.4, >= 11.0.0, < 11.0.7 10.33.4, 11.0.7
07.01.2026

pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"

Wysoka · 8.8 CVE-2025-69264 >= 10.0.0, < 10.26.0 10.26.0
07.01.2026

pnpm Has Lockfile Integrity Bypass that Allows Remote Dynamic Dependencies

Wysoka · 7.5 CVE-2025-69263 < 10.26.0 10.26.0
07.01.2026

pnpm vulnerable to Command Injection via environment variable substitution

Wysoka · 7.5 CVE-2025-69262 >= 6.25.0, < 10.27.0 10.27.0
01.08.2023

pnpm incorrectly parses tar archives relative to specification

Wysoka · 7.5 CVE-2023-37478 < 7.33.4, >= 8.0.0, < 8.6.8 7.33.4, 8.6.8
23.03.2022

Untrusted Search Path in PNPM

Wysoka · 8.8 CVE-2022-26183 < 6.15.1 6.15.1

Dowiedz się, które podatności dotyczą Twojej aplikacji

Po podłączeniu integracji DockRay i włączeniu raportowania oprogramowania DockRay porównuje zgłoszone wersje komponentów ze znanymi podatnościami i powiadamia o potwierdzonych dopasowaniach. Zakres zależy od obsługiwanej technologii i dostępnych biuletynów.

Podłącz swoją aplikację