Skip to content
OpenAdvisories

Package · npm

manifest

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.8
    CVE-2025-27408

    Manifest Uses a One-Way Hash without a Salt

    Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the da…

    mnfst manifest manifest npm