Auto-Updater Downloads Unsigned Binaries (Security Risk) #7

Open

opened

Auto-updater:

Downloads .exe from GitHub Releases
No signature verification
No SHA256 checksum

Risk:
MITM attack → malware injection

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests