Cocoapods Cocoapods-Downloader
2 CVEs affecting Cocoapods Cocoapods-Downloader. Latest disclosed: 2022-04-01. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24440 | High | 8.1 | 2022-04-01 | The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git argument injection. When calling the Pod… |
CVE-2022-21223 | High | 8.1 | 2022-04-01 | The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg)… |