Threats affecting pkg:github/actuator/com.alanmobile

Alan: Health Insurance for Android version 1.450.0 contains a path traversal vulnerability in its exported ShareReceiverActivity. This flaw allows a malicious app on the same device to write files outside the intended directory by exploiting an unsanitized _display_name parameter. Attackers can overwrite sensitive files within the app's sandbox, such as databases and WebView data, potentially enabling state tampering or code execution without user interaction or authentication.