Repository navigation
Security: onepub-dev/pubspec_manager
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Nested publish_to key can shadow the actual top-level publication targetGHSA-j4fq-6rf7-8m7j published
Oct 28, 2026 by bsuttonModerate -
Line breaks in pubspec mutation inputs can inject YAML keysGHSA-2g23-fm47-h4rv published
Oct 28, 2026 by bsuttonModerate -
Comment-heavy pubspec YAML causes excessive synchronous parsing workGHSA-fccx-w892-9hgf published
Oct 28, 2026 by bsuttonModerate -
Missing relative pubspec path can hang synchronous ancestor searchGHSA-rwp6-647j-m6h9 published
Oct 28, 2026 by bsuttonModerate
Learn more about advisories related to onepub-dev/pubspec_manager in the GitHub Advisory Database