Repository navigation
Security
- The host detector ran
ioreg,kenvandpowershell.exethrough a shell, so they were
looked up onPATH, and on Windows in the current directory. A program placed there ran
instead. It runs/usr/sbin/ioreg,/bin/kenvandreg.exeby absolute path, without a
shell (GHSA-fc6f-cp96-6g5w). - When the host id lookup failed,
host.idwas""on macOS and Windows, or/bin/kenvon
BSD. It is left out instead (GHSA-fc6f-cp96-6g5w).
Full Changelog: 1.16.0...1.16.1