Post
CVE Alerts
cve.skyfleet.blue
did:plc:myutg2pwkjbukv7pq2hp5mtl
CVE-2026-48995 - pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile
CVE ID : CVE-2026-48995
Published : June 25, 2026, 4:58 p.m. | 46 minutes ago
Description : pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com se...
https://cvefeed.io/vuln/detail/CVE-2026-48995
2026-06-25T18:03:09.865Z