GitHub Repojacking Bug Could've Allowed Attackers to Takeover Other Users' Repositories

Discussion in 'News Aggregator' started by Ravie Lakshmanan, 31 Oct 2022.

  1. Cloud-based repository hosting service GitHub has addressed a high-severity security flaw that could have been exploited to create malicious repositories and mount supply chain attacks. The RepoJacking technique, disclosed by Checkmarx, entails a bypass of a protection mechanism called popular repository namespace retirement, which aims to prevent developers from pulling unsafe repositories with

    Continue reading...
     

Share This Page

Loading...