CVE-2026-48995

HIGH

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies. This vulnerability is fixed in 10.33.4 and 11.0.7.

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Published: 6/25/2026Modified: 6/29/2026

Related Intelligence (1)

HIGHVulnerability

NVD HIGH: CVE-2026-48995 — pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.git...

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and i

CVE-2026-48995
NIST NVD

References (2)

https://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hpExploitVendor Advisoryhttps://github.com/pnpm/pnpm/security/advisories/GHSA-hg3w-7f8c-63hpExploitVendor Advisory