CVE-2026-48995: pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2026-06-25 · updated 2026-06-29
Weakness: CWE-353

Description

pnpm is a package manager. Prior to 10.33.4 and 11.0.7, a malicious codeload.github.com server can serve whatever tarball it wants and pnpm will install it regardless of the lockfile. The lockfile does not store the hash of the dependencies from https://codeload.github.com. This means that if this server was compromised or a person's machine configuration was compromised, pnpm would download and install these dependencies. This vulnerability is fixed in 10.33.4 and 11.0.7.

Affected products

pnpm: before 10.33.4; from 11.0.0 before 11.0.7 — fixed in 10.33.4, 11.0.7

How to fix

Upgrade to a fixed version: pnpm 10.33.4, 11.0.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-48995 or the next vulnerability affects your stack