9.4Kritik
Build Cache Poisoning via Untrusted Pull Requests
Niklas Portmann Azure Based Remote Cache Plugin for Nx; Niklas Portmann Minio Based Remote Cache Plugin for Nx; Niklas Portmann Nx Remote Cache Utilities; Nx AWS S3 Remote Cache Plugin for Nx
A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud Storage, or similar object storage) that allows any contributor with pull request pri…