Critical flaw in new tool could allow attackers to steal data at will from developers working with untrusted repositories.

The US government has urged software manufacturers to work towards the elimination of operating system (OS) command injection vulnerabilities. The alert from the Cybersecurity and Infrastructure ...