In vulnerable/ there is a version of the application that is vulnerable to the attack. In fixed/ there is a version of the application that is upgraded to the minimal version that fixes the ...