rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary.
Advisories for Cargo/Age package
2024
A plugin name containing a path separator may allow an attacker to execute an arbitrary binary.