pnpm

• CVE-2026-50015 - pnpm malicious patch path traversal 2026-06-27
• CVE-2026-55487 - pnpm allowBuilds identity spoof 2026-06-27
• CVE-2026-55697 - pnpm global bin name traversal 2026-06-27
• CVE-2026-55698 - pnpm env lockfile short-circuit 2026-06-27
• CVE-2026-55700 - pnpm stage download symlink traversal 2026-06-27
• GHSA-72r4-9c5j-mj57 - pnpm better-node-range CPU exhaustion 2026-06-27
• GHSA-fr4h-3cph-29xv - pnpm protocol specifier bypass 2026-06-27
• GHSA-qrv3-253h-g69c - pnpm configDependencies symlink traversal 2026-06-27