Threats affecting pkg:github/receive_sharing_intent

CVE-2026-60117 is a path traversal vulnerability in the Android implementation of the Flutter/Dart receive_sharing_intent package versions 1.4.1 through 1.9.0. It allows a malicious app to write files outside the intended cache directory by supplying a crafted _display_name value from an untrusted ContentProvider. This can lead to file overwrite within the receiving application's private sandbox without user interaction.