1 result · Feed
-
High 7.0
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
`OpenTelemetry.Resources.Host` NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the `host.id` resource attribute detector launches the `sh`…