VYPR

app-builder

by Develar

CVEs (1)

  • CVE-2026-13723Jul 29, 2026
    risk 0.00cvss epss 0.00

    A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a Unicode Normalization Collision combined with symlink following behavior. APFS treats certain Unicode equivalent…