Inedo ProGet before 4.7.14 does not properly address dangerous package IDs during package addition, aka PG-1060.

Published Sep 29, 2017 · Updated Sep 16, 2024 · Assigned by mitre