You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Release Notes
Added authenticode signature verification for PingCastleAutoUpdater to block updates from non-signed or tampered ZIP files. Files are extracted and examined into a temporary directory and are only installed if signatures are verified.
Added path traversal checks when processing ZIP files in PingCastleAutoUpdater to restrict update contents to the target directory only.
