2026-01-27 · 2 min · BitNinja Team

CVE-2026-24056: Critical Server Security Alert

The CVE-2026-24056 vulnerability has emerged as a significant threat in server security. It affects the pnpm package manager, specifically before version 10.28.2. The flaw occurs when pnpm installs dependencies through file: or git: protocols, allowing it to follow symlinks un...