Skip to content

v3.29.0

Choose a tag to compare

View all tags
@goklab goklab released this 27 Jun 17:54
v3.29.0
e86a78f
  • VG1098 — @deepstream/server <10.0.5 prototype pollution (CVE-2026-49252, critical CVSS 9.9)
  • VG1099 — pnpm lockfile/manifest path-traversal & RCE cluster, flags Corepack packageManager pin <10.34.2 / 11.0–11.5.2 (CVE-2026-55698, -55487, -50016 et al.)
  • 453 rules / 80 CVE rules / 39 tools; 0-FP semver, 33 new tests, gate PASS/A/0
Assets 2
Loading