CVE-2025-69264 - pnpm v10+ Bypass - Complete Guide

CVE-2025-69264 - pnpm v10+ Bypass - Complete Guide

CVE ID : CVE-2025-69264 Published : Jan. 7, 2026, 9:53 p.m. | 36 minutes ago Description : pnpm is a package manager. Versions 10.0.0 through 10.25 allow git-hosted dependencies to execute arbitrary code during pnpm install, circumventing the v10 security feature

CVE Details

Published
Jan. 7, 2026

Source: Telegram CVE Monitor