pnpm 11.3.x < 11.5.3 阶段下载路径遍历 (CVE-2026-55700)

high Nessus 插件 ID 325221

版本 1.2

Jul 7, 2026, 11:10 AM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")
  • Exploit attributes ("Exploit available" set to "True")
  • Exploit attributes ("Exploitability ease" set to "Exploits are available")

Plugin Feed: 202607071110

版本 1.1

Jul 7, 2026, 5:47 AM

  • New

Plugin Feed: 202607070547

* Changelogs are generally available for changes made after Nov 1, 2022