gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

pnpm_8, pnpm_9: mark insecure (#535905)

Browse Source
This commit is contained in:
dotlambda
2026-06-27 19:25:31 +00:00
committed by GitHub
parent bcfa15b876 b0ed2e0e81
commit 3af24d1a5f
1 changed files with 18 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkgs/development/tools/pnpm/default.nix
+18
View File
@@ -9,10 +9,28 @@ let
"8" = {
version = "8.15.9";
hash = "sha256-2qJ6C1QbxjUyP/lsLe2ZVGf/n+bWn/ZwIVWKqa2dzDY=";
knownVulnerabilities = [
"CVE-2026-48995"
"CVE-2026-50014"
"CVE-2026-50015"
"CVE-2026-50016"
"CVE-2026-50017"
"CVE-2026-50573"
"CVE-2026-55699"
];
};
"9" = {
version = "9.15.9";
hash = "sha256-z4anrXZEBjldQoam0J1zBxFyCsxtk+nc6ax6xNxKKKc=";
knownVulnerabilities = [
"CVE-2026-48995"
"CVE-2026-50014"
"CVE-2026-50015"
"CVE-2026-50016"
"CVE-2026-50017"
"CVE-2026-50573"
"CVE-2026-55699"
];
};
# 10.29.3 made a breaking change: https://github.com/pnpm/pnpm/issues/10601.
# Pnpm packages that depend on electron builder must be upgraded to 26.8.2 or newer