Skip to content
Threat Feed
Subscribe

Product

OpenTelemetry.Resources.Host (< 1.16.0-Beta.2)

1 brief RSS
high advisory

Untrusted Search Path Vulnerability in OpenTelemetry.Resources.Host on macOS

The OpenTelemetry.Resources.Host NuGet package is vulnerable to arbitrary code execution on macOS due to the use of bare paths for system command execution, allowing PATH hijacking.

OpenTelemetry.Resources.Host
1t 1c