entitlements@1.2.0 vulnerabilities

check the entitlements of a .app bundle

Known vulnerabilities in the entitlements package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Arbitrary Command Injection `entitlements` checks the entitlements of a .app bundle. Affected versions of this package are vulnerable to Arbitrary Command Injection. An attacker that controls the path parameter could inject commands on the victim's machine. How to fix Arbitrary Command Injection? Upgrade `entitlements` to version 1.3.0 or higher.	<1.3.0