nodejs

• CVE-2026-50015 - pnpm malicious patch path traversal 2026-06-27
• CVE-2026-55487 - pnpm allowBuilds identity spoof 2026-06-27
• CVE-2026-55697 - pnpm global bin name traversal 2026-06-27
• CVE-2026-55698 - pnpm env lockfile short-circuit 2026-06-27
• CVE-2026-55700 - pnpm stage download symlink traversal 2026-06-27
• GHSA-72r4-9c5j-mj57 - pnpm better-node-range CPU exhaustion 2026-06-27
• GHSA-fr4h-3cph-29xv - pnpm protocol specifier bypass 2026-06-27
• GHSA-qrv3-253h-g69c - pnpm configDependencies symlink traversal 2026-06-27
• CVE-2026-6734 - undici Socks5ProxyAgent cross-origin pool confusion 2026-06-17
• CVE-2026-6734 - undici Socks5ProxyAgent cross-origin pool reuse 2026-06-17
• CVE-2026-48068 - grpc-js malformed request server crash 2026-06-13
• CVE-2026-48069 - grpc-js malformed compressed message crash 2026-06-13
• CVE-2026-6321 - fast-uri encoded path traversal 2026-06-08
• CVE-2026-10796 - nvm mirror version command injection 2026-06-07
• CVE-2026-41680 - marked tokenizer OOM denial of service 2026-06-07
• CVE-2026-41242 - protobufjs generated-code RCE 2026-06-06