Vulnerabilities

TI-2024-25625 CVE-2024-38368

Trunk's 'Claim your pod' could be used to obtain un-used pods

MEDIUM 62

trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.14851 Published 2024-07-01 Fixed in 71be544 CWE-668

TI-2024-25624 CVE-2024-38367

HIGH 74

trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.11131 Published 2024-07-01 No fix listed CWE-488

TI-2024-25623 CVE-2024-38366

HIGH 76

trunk.cocoapods.org is the authentication server for the CoacoaPods dependency manager.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.17786 Published 2024-07-01 Fixed in 001cc3a CWE-74