CocoaPods

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CocoaPods records in CISA KEV

No CocoaPods vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Cocoapods-downloader · all components

TI-2022-08312 CVE-2022-24440 · GHSA-7627-mp87-jf6q

MEDIUM 47

The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0262 Published 2022-04-01 Fixed in 1.6.0, 1.6.3 CWE-88

TI-2022-05616 CVE-2022-21223 · GHSA-g397-v4w5-4m79

MEDIUM 45

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01687 Published 2022-04-01 Fixed in 1.6.2 CWE-88