EUVD-2021-27706

Malicious code in bioql PyPI...

Remote code execution

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

PT-2021-22925

Name of the Vulnerable Software and Affected Versions Sketch versions prior to 75 Description The issue allows library feeds to be used to bypass file quarantine, resulting in remote code execution. This can be achieved by using a CommandString in a terminal profile to Terminal.app, allowing file...