manifest-tool

Direct Vulnerabilities

Known vulnerabilities in the manifest-tool package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Information Exposure	<2.2.2-r18
L GHSA-8wmf-6v46-5gfg	<2.2.2-r18
L Resource Exhaustion	<2.2.2-r17
L GHSA-pg57-6jwg-q645	<2.2.2-r17
L Directory Traversal	<2.2.2-r16
L Server-Side Request Forgery (SSRF)	<2.2.2-r16
L GHSA-h7vf-4x9w-h99v	<2.2.2-r16
L GHSA-m37j-52j7-pjw7	<2.2.2-r16
L GHSA-7jxh-36q5-gcqv	<2.2.2-r15
L Resource Exhaustion	<2.2.2-r15
L Improper Validation of Array Index	<2.2.2-r14
L GHSA-2v4p-qf9q-27wj	<2.2.2-r14
L GHSA-vp52-pcj8-j9qc	<2.2.2-r13
L Resource Exhaustion	<2.2.2-r13
L CVE-2026-56860	<2.2.2-r9
L GHSA-xc2p-8ggw-6cr5	<2.2.2-r9
L CVE-2026-56862	<2.2.2-r9
L CVE-2026-33818	<2.2.2-r9
L GHSA-w2q5-6q6x-x959	<2.2.2-r9
L GHSA-7qch-w8m5-g3h3	<2.2.2-r9
L GHSA-25mv-j2qr-v5jq	<2.2.2-r9
L CVE-2026-39821	<2.2.2-r9
L GHSA-hrxh-6v49-42gf	<2.2.2-r8
L GHSA-ff52-ph69-cf7x	<2.2.2-r7
L CVE-2026-42505	<2.2.2-r7
L Server-Side Request Forgery (SSRF)	<2.2.2-r6
L External Control of File Name or Path	<2.2.2-r6
L GHSA-vh4v-2xq2-g5cg	<2.2.2-r6
L GHSA-8xwf-rjm4-xvhv	<2.2.2-r6
L GHSA-xf85-363p-868w	<2.2.2-r6
L Cleartext Transmission of Sensitive Information	<2.2.2-r6
L GHSA-jxpm-75mh-9fp7	<2.2.2-r6
L GHSA-33vj-92qq-66hc	<2.2.2-r4
L Improper Input Validation	<2.2.2-r4
L CVE-2026-47262	<2.2.2-r4
L GHSA-rgh6-rfwx-v388	<2.2.2-r4
L GHSA-5wrp-cwcj-q835	<2.2.2-r5
L Uncontrolled Memory Allocation	<2.2.2-r5
L GHSA-cvxm-645q-p574	<2.2.2-r4
L Improper Input Validation	<2.2.2-r4
L Symlink Following	<2.2.2-r4
L GHSA-jpcc-p29g-p8mq	<2.2.2-r4
L GHSA-xhf5-7wjv-pqxp	<2.2.2-r4
L CVE-2026-50195	<2.2.2-r4
L GHSA-h3gm-q7m7-mp28	<2.2.2-r3
L GHSA-4279-q6mj-392r	<2.2.2-r3
L CVE-2026-42507	<2.2.2-r3
L CVE-2026-27145	<2.2.2-r3
L GHSA-fqw6-gf59-qr4w	<2.2.2-r1
L Improper Privilege Management	<2.2.2-r1
L CVE-2026-42501	<2.2.2-r0
L GHSA-8g2r-hhvj-mv99	<2.2.2-r0
M Out-of-bounds Write	<2.2.2-r0
M Link Following	<2.2.2-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<2.2.2-r0
L GHSA-5m4p-2gjx-p2g8	<2.2.2-r0
L GHSA-qf3q-3h68-mmh2	<2.2.2-r0
H NULL Pointer Dereference	<2.2.2-r0
L GHSA-qc64-m6c2-v4x7	<2.2.2-r0
H Allocation of Resources Without Limits or Throttling	<2.2.2-r2
H Improper Certificate Validation	<2.2.2-r2
L GHSA-m4pr-4j3g-9v7v	<2.2.2-r2
L GHSA-5w89-2c2x-6x66	<2.2.2-r2
H Incorrect Authorization	<2.2.2-r2
L GHSA-gjvh-7jh8-7xhm	<2.2.2-r2
L GHSA-jrg3-gfjw-hm96	<2.2.2-r2
L CVE-2026-32280	<2.2.2-r2
H CVE-2025-15558	<2.2.1-r6
L GHSA-p436-gjf2-799p	<2.2.1-r6
L GHSA-8jvr-vh7g-f8gx	<2.2.1-r5
L CVE-2025-61732	<2.2.1-r5
C CVE-2025-68121	<2.2.1-r5
L GHSA-h355-32pf-p2xm	<2.2.1-r5
L Allocation of Resources Without Limits or Throttling	<2.2.1-r4
L CVE-2025-61730	<2.2.1-r4
L CVE-2025-61731	<2.2.1-r4
L Out-of-bounds Write	<2.2.1-r4
L GHSA-gm9r-q53w-2gh4	<2.2.1-r4
L GHSA-gr56-3gp6-6gmj	<2.2.1-r4
L GHSA-cm6p-qc7v-m3jw	<2.2.1-r4
L GHSA-xvqr-69v8-f3gv	<2.2.1-r4
H Incorrect Execution-Assigned Permissions	<2.2.1-r2
M Memory Leak	<2.2.1-r2
L CVE-2025-47912	<2.2.1-r1
L Algorithmic Complexity	<2.2.1-r1
L CVE-2025-58186	<2.2.1-r1
L Allocation of Resources Without Limits or Throttling	<2.2.1-r1
L Improper Certificate Validation	<2.2.1-r1
L CVE-2025-58183	<2.2.1-r1
L Information Exposure Through Log Files	<2.2.1-r1
L Allocation of Resources Without Limits or Throttling	<2.2.1-r1
L CVE-2025-61725	<2.2.1-r1
L Allocation of Resources Without Limits or Throttling	<2.2.1-r1

Vulnerability

Vulnerable Version

Information Exposure

<2.2.2-r18