A crafted request like this:
PUT /sinopia/user%2frepo HTTP/1.1
accept: application/json
content-type: application/json
content-length: 7
Connection: keep-alive
"0.6.0"
Can cause an invalid tag to be inserted, and cause issues in npm later.
Not a big deal unless you're using github dependencies with a package name that doesn't exist in repository.
A crafted request like this:
Can cause an invalid tag to be inserted, and cause issues in npm later.
Not a big deal unless you're using github dependencies with a package name that doesn't exist in repository.