Re: Almost every iOS & macOS app has had huge vulnerabilities for over a decade

Peter <confused@nospam.net> wrote:

A near inconceivable number of Apple iPhone & macOS apps have been
exposed to critical vulnerabilities in a popular dependency manager
for over 10 Years such that over three million CocoaPods-built iOS
and macOS apps have been vulnerable for over a decade, unbeknownst to
Apple & its test teams.

>
This is very concerning, however the bit you omitted is that these
vulnerabilities were patched late last year.
>
The most important thing people can do is keep their apps and iOS up
to date. And maybe reconsider using apps that haven't been updated
since October 2023.
>
It's also worth mentioning that this was a vulnerability explicitly
possible because of the open source model. Had CocoaPods not been
available on github it would have been possible to exploit as easily
or at all.