WS-2026-0129
Published:October 11, 2026
Updated:October 20, 2026
pnpm 11.0.0-alpha.4 before 11.28.6 and 12.0.0-alpha.2 before 12.12.1: `pnpm publish` uses the CI-provided NPM_ID_TOKEN (OIDC trusted publishing) without checking that the token's `aud` claim matches the selected registry, so the token is sent to whichever registry the publish targets, including one it was not issued for. Fixed in 11.28.6 and 12.12.1 (commit 42651359). @pnpm/releasing.commands is fixed in 1101.2.9; its 1000.x and 1100.x lines have no fixed release.
Affected Packages
https://github.com/pnpm/pnpm.git (GITHUB):
Affected version(s) >=v12.0.0 <v12.12.1Fix Suggestion:
Update to version v12.12.1https://github.com/pnpm/pnpm.git (GITHUB):
Affected version(s) >=v11.0.1 <v11.28.6Fix Suggestion:
Update to version v11.28.6@pnpm/releasing.commands (NPM):
Affected version(s) >=1101.0.0 <1101.2.9Fix Suggestion:
Update to version 1101.2.9pnpm (NPM):
Affected version(s) >=11.0.1 <11.28.6Fix Suggestion:
Update to version 11.28.6@pnpm/exe (NPM):
Affected version(s) >=11.0.1 <11.28.6Fix Suggestion:
Update to version 11.28.6Related Resources (2)
Do you need more information?
Contact UsCVSS v4
Base Score:
5.9
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
ACTIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
NONE
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Weakness Type (CWE)
Insufficiently Protected Credentials