Remote Code Execution Found in CocoaPods
I found this bug! Here's my blog post about it: <a href="https://justi.cz/security/2021/04/20/cocoapods-rce.html" rel="nofollow">https://justi.cz/security/2021/04/20/cocoapods-rce.html</a><p>I started looking because I wanted to find bugs in Signal for iOS, which uses CocoaPods: <a href="https://github.com/signalapp/Signal-iOS/blob/master/Podfile" rel="nofollow">https://github.com/signalapp/Signal-iOS/blob/master/Podfile</a>