javascript

• CVE-2026-6734 - Impact When using Socks5ProxyAgent security control bypass 2026-06-29
• GHSA-72R4-9C5J-MJ57 - pnpm security control bypass 2026-06-29
• GHSA-FR4H-3CPH-29XV - pnpm security control bypass 2026-06-29
• GHSA-QRV3-253H-G69C - pnpm path traversal 2026-06-29
• CVE-2025-12735 - expr-eval context function RCE 2026-06-11
• CVE-2026-41507 - math-codegen string literal RCE 2026-05-02
• JavaScript `eval()` / `new Function()` on untrusted input 2026-04-25
• Prototype pollution — `merge`, `assign`, and friends 2026-04-25