Threats tagged 'ghsa-cr7p-v4gj-9p32'

Raspberry Pi Imager version 1.9.6 for Windows has a vulnerability in its OS customization feature where the 'public-key authentication' setting re-adds a user's local id_rsa.pub key to the Raspberry Pi's authorized_keys file even after the user deletes it via the interface. This behavior unintentionally creates an attack surface by allowing unauthorized keys to be used for login.