SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.
Link | Tags |
---|---|
https://github.com/Charcoal-SE/SmokeDetector/security/advisories/GHSA-5w85-7mwr-v44q | third party advisory |