Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: CocoaPods Component: Cocoapods-downloader Clear all filters
TI-2022-05616 CVE-2022-21223 · GHSA-g397-v4w5-4m79

Command injection in cocoapods-downloader

Priority MEDIUM 45

The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01687 Published 2022-04-01 Fixed in 1.6.2 CWE-88
TI-2022-08312 CVE-2022-24440 · GHSA-7627-mp87-jf6q

Command injection in cocoapods-downloader

Priority MEDIUM 47

The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git argument injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0262 Published 2022-04-01 Fixed in 1.6.0, 1.6.3 CWE-88