https://vulnerability.circl.lu/sightings/feed 2026-07-01T17:44:24.823387+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3a4f6078-39a8-4354-a51d-ff2ece6d32f7/export 2026-07-01T17:44:24.844413+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3a4f6078-39a8-4354-a51d-ff2ece6d32f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mplbhczzou2a", "content": "\ud83d\udccc CVE-2026-50016 - pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm allows a transitive dependency alias from registry package metadata to contain path trave... https://www.cyberhub.blog/cves/CVE-2026-50016", "creation_timestamp": "2026-07-01T10:07:06.894100Z"} 2026-07-01T10:07:06.894100+00:00 https://vulnerability.circl.lu/sighting/041852e0-1ad1-4db3-b44c-299b4265190a/export 2026-07-01T17:44:24.846679+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "041852e0-1ad1-4db3-b44c-299b4265190a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphre6wvtm2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-50016 \u0432 pnpm: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430 Node.js\n\n\n\nhttps://kripta.biz/posts/398D67DF-1697-4418-BCAF-4FC38E9E0C4B", "creation_timestamp": "2026-06-30T00:41:03.012106Z"} 2026-06-30T00:41:03.012106+00:00 https://vulnerability.circl.lu/sighting/26d1e211-b77c-44c8-b072-18d07c175360/export 2026-07-01T17:44:24.846868+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "26d1e211-b77c-44c8-b072-18d07c175360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50016", "type": "published-proof-of-concept", "source": "https://github.com/pnpm/pnpm/security/advisories/GHSA-hwx4-2j3j-g496", "content": "", "creation_timestamp": "2026-06-27T00:35:31.920805Z"} 2026-06-27T00:35:31.920805+00:00 https://vulnerability.circl.lu/sighting/339631e1-1fec-4812-b9a4-f12e1e3d1ba5/export 2026-07-01T17:44:24.848092+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "339631e1-1fec-4812-b9a4-f12e1e3d1ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp4yzms5tm2j", "content": "CVE-2026-50016 - pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement\nCVE ID : CVE-2026-50016\n \n Published : June 25, 2026, 4:53 p.m. | 51\u00a0minutes ago\n \n Description : pnpm is a package manager. Prior to 10.34.0 and 11.4.0, pnpm...", "creation_timestamp": "2026-06-25T17:59:00.887568Z"} 2026-06-25T17:59:00.887568+00:00