Skyscanner/backpack-android
main@ 18c153aFixes2
CVEs0
Peak severityHigh
Commits2,545
Regression coverage100.0%
Highlights
Command Injection: 1 prior fix. Scrutinize any change in this area.
gulpfile.js: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
XML External Entity (XXE): The xmldom dependency was upgraded to @xmldom/xmldom 0.8.0 to fix known XML parsing vulnerabilities, which could allow external entity expansion leading to file disclosure or SSRF during build tasks.
Command Injection:
Last analyzed 31 Aug 2026, 21:30 UTC