Product
ZeroBrew version 0.3.1 and prior fails to validate checksums for formula resources, allowing attackers to perform supply chain attacks via intercepted network traffic during the build process.