https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:40:29.422927+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pnpm-cve-2026-59194 BREW-pnpm-CVE-2026-59194 — pnpm: patch-remove could delete project-selected files outside the patches directory 2026-10-07T15:40:29.539980+00:00

Affected: Homebrew: pnpm

pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry could resolve outside the configured patches directory and cause pnpm patch-remove to delete an arbitrary reachable file. This vulnerability is fixed in 10.34.4 and 11.7.0.

 https://cve.radiocsirt.org/vuln/euvd-2026-333734 EUVD-2026-333734 2026-10-07T15:40:29.540037+00:00 EUVD-2026-333734 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59194 fkie_cve-2026-59194 2026-10-07T15:40:29.540054+00:00

pnpm is a package manager. Prior to 10.34.4 and 11.7.0, a crafted patch entry could resolve outside the configured patches directory and cause pnpm patch-remove to delete an arbitrary reachable file. This vulnerability is fixed in 10.34.4 and 11.7.0.

 https://cve.radiocsirt.org/vuln/ghsa-72r4-9c5j-mj57 GHSA-72r4-9c5j-mj57 — pnpm: `patch-remove` could delete project-selected files outside the patches directory 2026-10-07T15:40:29.540077+00:00

Affected: npm: pnpm

## Summary

The `patch-remove` deletion-scope issue tracked as GHSA-72r4-9c5j-mj57 / CAND-PNPM-030 has been addressed in pnpm.

A crafted patch entry could resolve outside the configured patches directory and cause `pnpm patch-remove` to delete an arbitrary reachable file. This patch validates the configured directory and every resolved target before unlinking anything, then deletes the final directory entry without following it.

## Security boundary

- Traversal and absolute paths that resolve outside the configured patches directory are rejected before deletion. - Parent directories are canonicalized before deletion, including the case where a nested symlink points outside and the final outside entry is itself dangling. - The complete batch is validated before any file is removed. - Component-aware predicates accept valid names beginning with `..` while still rejecting parent traversal, Windows drive escapes, and UNC escapes. - Valid files and symlinked patch directories whose canonical targets remain below the lockfile directory continue to work. - A final symlink inside a valid patch directory is unlinked without following its target, including when the target is outside or dangling.

## Exploit replay

Before the patch, a workspace `patchedDependencies` path that resolved outside the project caused `pnpm patch-remove` to delete the external sentinel. A second replay used a nested parent symlink and a dangling outside victim: `realpath()` returned `ENOENT`, yet the vict…