CVE-2026-50016 - pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement
CVE ID :CVE-2026-50016 Published : June 25, 2026, 4:53 p.m. | 4 hours, 18 minutes ago Description :pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path traversal segments. During install, pnpm later...