CVE-2021-23331: Undefined Security Weakness

This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file...

PT-2021-15440

Name of the Vulnerable Software and Affected Versions com.squareup:connect affected versions not specified Description The issue affects the prepareDownloadFile method, which creates a temporary file with permissions bits of -rw-r--r-- on unix-like systems. Since the system temporary directory is...