Known Vulnerabilities in Package Manager Configurations