Advisories · Technology
CocoaPods.
Every CVE that names CocoaPods among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Trunk's 'Claim your pod' could be used to obtain un-used pods
- CocoaPods
- Information disclosure
- CVSS 8.2 HighCritical · CVSS 7+ and EPSS
CoacoaPods trunk sessions verification step could be manipulated for owner session hijacking
- CocoaPods
- CWE-488
- CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
CoacoaPods trunk RCE in email verification system rfc-822
- CocoaPods
- Other injection