Zoltan Kochan b9b7b71935 fix(packlist): prevent escaping directory symlinks and path traversals in bundled dependencies (#16619) ...

Validate bundled dependency names with isSafeBundleName to prevent path traversal in bundleDependencies.
Ensure files resolving through directory symlinks do not escape the package root in @pnpm/fs.packlist and @pnpm/store.cafs.

Closes https://github.com/pnpm/tasks/issues/83
Closes https://github.com/pnpm/tasks/issues/93

2026-10-05 23:32:43 +02:00

..

index.ts

…

tsconfig.json

…