TI-2026-11568 CVE-2026-13723 · GHSA-m52r-27c6-4q88
Develar's electron-builder allows arbitrary file overwrite
Priority LOW 35
A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink followin…