From 3e34104ae27798116650cf0f20e98d2b44a83336 Mon Sep 17 00:00:00 2001
From: Sefa Eyeoglu <contact@scrumplex.net>
Date: Fri, 10 Jul 2026 19:08:02 +0200
Subject: [PATCH] pnpm_*: add additional CVEs to vulnerable versions

Closes https://github.com/NixOS/nixpkgs/issues/539168

Signed-off-by: Sefa Eyeoglu <contact@scrumplex.net>
---
 pkgs/development/tools/pnpm/default.nix | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/pkgs/development/tools/pnpm/default.nix b/pkgs/development/tools/pnpm/default.nix
index 80f37039cfb8..6b7b4209bf59 100644
--- a/pkgs/development/tools/pnpm/default.nix
+++ b/pkgs/development/tools/pnpm/default.nix
@@ -17,6 +17,9 @@ let
         "CVE-2026-50017"
         "CVE-2026-50573"
         "CVE-2026-55699"
+        "CVE-2026-59194"
+        "CVE-2026-59195"
+        "CVE-2026-59196"
       ];
     };
     "9" = {
@@ -30,6 +33,9 @@ let
         "CVE-2026-50017"
         "CVE-2026-50573"
         "CVE-2026-55699"
+        "CVE-2026-59194"
+        "CVE-2026-59195"
+        "CVE-2026-59196"
       ];
     };
     # 10.29.3 made a breaking change: https://github.com/pnpm/pnpm/issues/10601.
@@ -46,6 +52,9 @@ let
         "CVE-2026-50017"
         "CVE-2026-50573"
         "CVE-2026-55699"
+        "CVE-2026-59194"
+        "CVE-2026-59195"
+        "CVE-2026-59196"
       ];
     };
     # 10.34.1 made a breaking change that causes
@@ -58,6 +67,9 @@ let
         "CVE-2026-55698"
         "CVE-2026-55180"
         "CVE-2026-55697"
+        "CVE-2026-59194"
+        "CVE-2026-59195"
+        "CVE-2026-59196"
       ];
     };
     "10" = {