Auto-Updater Downloads Unsigned Binaries (Security Risk) #7
Description
Auto-updater:
Downloads .exe from GitHub Releases
No signature verification
No SHA256 checksum
Risk:
MITM attack → malware injection
{{ message }}
Auto-updater:
Downloads .exe from GitHub Releases
No signature verification
No SHA256 checksum
Risk:
MITM attack → malware injection