📦 Gosign

GoSign Desktop versions 2.4.0 and earlier have an insecure update mechanism that allows attackers to execute arbitrary code. The vulnerability occurs because the update manifest isn't digitally signed...