darcyclarke-manifest-pkg@2.0.0 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the darcyclarke-manifest-pkg package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • L
Improper Interaction Between Multiple Correctly-Behaving Entities

darcyclarke-manifest-pkg is a research package to demonstrate the technique of manifest confusion

Affected versions of this package are vulnerable to Improper Interaction Between Multiple Correctly-Behaving Entities. This is not a vulnerability on its own.

This package is a proof of concept of Manifest Confusion, in which the contents of a publicly distributed open source package does not match the contents stated in its manifest file. More information on the discovery can be found on the Snyk Support Portal.

How to fix Improper Interaction Between Multiple Correctly-Behaving Entities?

There is no fixed version for darcyclarke-manifest-pkg.

*