Daniel Mach

The issue allows attackers to manipulate the configuration of osc by injecting special files in .osc into the actual package sources, such as ` apiurl`. This enables the attacker to alter the osc configuration for the victim.