CVE-2021-24105

CVE-2021-24105 describes an ecosystem-wide dependency confusion vulnerability: attackers can publish high-version or malicious packages to public repositories that are pulled over private ones during development, build, or release, enabling remote code execution. Affected behavior depends on pack...

CVE-2021-24105 Package Managers Configurations Remote Code Execution Vulnerability

...