CocoaPods-RCE_CVE-2024-38366

CocoaPods-RCE Este repositorio incluye un análisis un poco más profundo del proceso de investigación y las ideas detrás de la vulnerabilidad RCE encontrada al investigar y romper el CocoaPods Package Manager. La publicación del blog con la investigación se puede leer aquí:...

EUVD-2024-37281

Malicious code in bioql PyPI...

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

A trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting downstream customers at severe risks. The vulnerabilities allow "any malicious actor to claim ownership...