CVE-2024-38367

creationtimestamp| type| source ---|---|--- 2024-07-02 16:00:07+00:00| seen| https://t.me/truesecator/5924 2026-07-26 07:00:33+00:00| seen| https://t.me/EchelonEyes/2908 2026-07-27 00:00:46+00:00| seen| https://t.me/EchelonEyes/2908 2026-07-28 00:00:42+00:00| published-proof-of-concept|...

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting downstream customers at severe risks. The vulnerabilities allow "any malicious actor to claim ownership...