{"id":"EUVD-2026-87974","enisaUuid":"9e885598-da5c-31a0-a224-6bdc56061c88","description":"pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project\u0027s pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the request-destination key set that otherwise suppresses placeholder expansion for untrusted manifests (as already done for registry, pnprServer, registries and namedRegistries), an attacker who controls a repository\u0027s pnpm-workspace.yaml can cause a victim who clones the repository and runs a pnpm command (e.g. pnpm install) to expand environment secrets such as NPM_TOKEN or GITHUB_TOKEN into a proxy hostname or userinfo and route install traffic — and the corresponding DNS lookups — through an attacker-controlled host. The exfiltration occurs during configuration loading, before any lifecycle script executes. Fixed in pnpm 11.11.0 and 10.34.5.","datePublished":"Sep 27, 2026, 5:02:33 PM","dateUpdated":"Sep 30, 2026, 3:47:12 PM","baseScore":8.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","references":"https://github.com/pnpm/pnpm/security/advisories/GHSA-vx52-2968-3vc6\nhttps://www.vulncheck.com/advisories/pnpm-11.0.0-before-11.11.0-environment-variable-exfiltration-via-proxy-settings\n","aliases":"CVE-2026-101043\nGHSA-49pq-2gf3-jw76\n","assigner":"VulnCheck","epss":0.29,"enisaIdProduct":[{"id":"8b0ff09b-22e4-399e-af6f-ac000b07242a","product":{"name":"pnpm","vendor":{"name":"pnpm"}},"product_version":"10.7.0 \u003c10.34.5"},{"id":"cf8fe67b-6838-35d4-9c1e-b7a94d42cb68","product":{"name":"pnpm","vendor":{"name":"pnpm"}},"product_version":"11.0.0 \u003c11.11.0"}],"enisaIdVendor":[{"id":"1afa9e21-5664-3f3e-9523-bb3394a4d266","vendor":{"name":"pnpm"}}],"enisaIdVulnerability":[{"id":"4b27ad8f-24a7-3a94-8c55-9522666c9185","vulnerability":{"id":"GHSA-49pq-2gf3-jw76","description":"pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project\u0027s pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the request-destination key set that otherwise suppresses placeholder expansion for untrusted manifests (as already done for registry, pnprServer, registries and namedRegistries), an attacker who controls a repository\u0027s pnpm-workspace.yaml can cause a victim who clones the repository and runs a pnpm command (e.g. pnpm install) to expand environment secrets such as NPM_TOKEN or GITHUB_TOKEN into a proxy hostname or userinfo and route install traffic — and the corresponding DNS lookups — through an attacker-controlled host. The exfiltration occurs during configuration loading, before any lifecycle script executes. Fixed in pnpm 11.11.0 and 10.34.5.","datePublished":"Sep 27, 2026, 6:30:22 PM","dateUpdated":"Sep 27, 2026, 6:30:23 PM","baseScore":0.0,"references":"https://github.com/pnpm/pnpm/security/advisories/GHSA-vx52-2968-3vc6\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-101043\nhttps://www.vulncheck.com/advisories/pnpm-11.0.0-before-11.11.0-environment-variable-exfiltration-via-proxy-settings\n","enisa_id":"EUVD-2026-87974\n","aliases":"GHSA-49pq-2gf3-jw76\nCVE-2026-101043\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:06:27 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"6204dfc2-b1eb-3cdf-a730-95781455dc59","vulnerability":{"id":"CVE-2026-101043","description":"pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the httpProxy, httpsProxy, and noProxy settings read from a project\u0027s pnpm-workspace.yaml. Because the manifest is repository-controlled and the proxy keys were omitted from the request-destination key set that otherwise suppresses placeholder expansion for untrusted manifests (as already done for registry, pnprServer, registries and namedRegistries), an attacker who controls a repository\u0027s pnpm-workspace.yaml can cause a victim who clones the repository and runs a pnpm command (e.g. pnpm install) to expand environment secrets such as NPM_TOKEN or GITHUB_TOKEN into a proxy hostname or userinfo and route install traffic — and the corresponding DNS lookups — through an attacker-controlled host. The exfiltration occurs during configuration loading, before any lifecycle script executes. Fixed in pnpm 11.11.0 and 10.34.5.","datePublished":"Sep 27, 2026, 5:02:33 PM","dateUpdated":"Sep 30, 2026, 3:47:12 PM","status":"PUBLISHED","baseScore":8.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","references":"https://github.com/pnpm/pnpm/security/advisories/GHSA-vx52-2968-3vc6\nhttps://www.vulncheck.com/advisories/pnpm-11.0.0-before-11.11.0-environment-variable-exfiltration-via-proxy-settings\n","enisa_id":"EUVD-2026-87974\n","assigner":"VulnCheck","epss":0.29,"dataProcessed":"Nov 1, 2026, 1:45:29 AM","vulnerabilityProduct":[{"id":"7c225284-6da1-3ef3-bcd4-0ed532d89a77","product":{"name":"pnpm","vendor":{"name":"pnpm"}},"product_version":"11.0.0 \u003c11.11.0"},{"id":"fe3315ea-66a5-3882-87e9-022fa3bab5f1","product":{"name":"pnpm","vendor":{"name":"pnpm"}},"product_version":"10.7.0 \u003c10.34.5"}],"vulnerabilityVendor":[{"id":"78793707-aeae-3d58-9f9d-11a84af70f00","vendor":{"name":"pnpm"}}]}}],"enisaIdAdvisory":[]}