CVE-2026-48995: Pnpm

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies. This vulnerability is fixed in 10.33.4 and 11.0.7.

Affected products

• Pnpm Pnpm: before 10.33.4 (fixed in 10.33.4); from 11.0.0, before 11.0.7 (fixed in 11.0.7)

Published 2026-06-25. Last modified 2026-06-29.