darcyclarke-manifest-pkg@2.1.7 vulnerabilities
-
latest version
2.1.15
-
first published
a year ago
-
latest version published
a year ago
-
licenses detected
- >=1.0.0 <2.1.9
Direct Vulnerabilities
Known vulnerabilities in the darcyclarke-manifest-pkg package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
darcyclarke-manifest-pkg is a research package to demonstrate the technique of manifest confusion Affected versions of this package are vulnerable to Improper Interaction Between Multiple Correctly-Behaving Entities. This is not a vulnerability on its own. This package is a proof of concept of Manifest Confusion, in which the contents of a publicly distributed open source package does not match the contents stated in its manifest file. More information on the discovery can be found on the Snyk Support Portal. How to fix Improper Interaction Between Multiple Correctly-Behaving Entities? There is no fixed version for |
*
|