https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:02:08.685000+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pnpm-cve-2026-48995 BREW-pnpm-CVE-2026-48995 — pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile 2026-10-02T10:02:08.688703+00:00

Affected: Homebrew: pnpm

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies. This vulnerability is fixed in 10.33.4 and 11.0.7.

 https://cve.radiocsirt.org/vuln/euvd-2026-330438 EUVD-2026-330438 2026-10-02T10:02:08.688759+00:00 EUVD-2026-330438 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48995 fkie_cve-2026-48995 2026-10-02T10:02:08.688776+00:00

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies. This vulnerability is fixed in 10.33.4 and 11.0.7.

 https://cve.radiocsirt.org/vuln/ghsa-hg3w-7f8c-63hp GHSA-hg3w-7f8c-63hp — pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile 2026-10-02T10:02:08.688800+00:00

Affected: npm: pnpm

### Summary

A malicious `codeload.github.com` server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile.

### Details

The lockfile does not store the hash of the dependencies from https://codeload.github.com

This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies.

### PoC

```sh > pnpm -v 10.28.2 ```

Given the following package.json:

```json { "dependencies": { "add": "git://github.com/dsherret/npm-git-dep.git#b3eeb9b" } } ```

This produces a lockfile like so:

```yaml lockfileVersion: '9.0'

settings: autoInstallPeers: true excludeLinksFromLockfile: false

importers:

.: dependencies: add: specifier: git://github.com/dsherret/npm-git-dep.git#b3eeb9b version: https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b

packages:

add@https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b: resolution: {tarball: https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b} version: 1.0.0

snapshots:

add@https://codeload.github.com/dsherret/npm-git-dep/tar.gz/b3eeb9b: {} ```

Notice that there is no hash. The `b3eeb9b` is not sufficient because I can configure my machine to resolve a compromised tarball from that url (I tested it out and pnpm just installs it).

### Impact

Anyone relying on github git dependencies.