Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2021/12/18 4:53 p.m.55 views

RubyGems: Dependency repository hijacking aka Repo Jacking from GitHub repo rubygems/bundler-site & rubygems/bundler.github.io + bundler.io docs

Dependency repository hijacking aka repo jacking is an obscure supply chain vulnerability, conceptually similar to subdomain takeover. When the linked repository owner changes their username, it becomes immediately available to be re-registered by anyone. This means that any project that linked...

7.9AI score
SaveExploits0
Rows per page
Query Builder