Security fixes are provided for the latest commit on the default branch.
This repository is a compatibility utility that temporarily enables legacy PowerShell 2.0 components.
Important considerations:
- PowerShell 2.0 is legacy and should only be enabled for the shortest possible time.
- This project requires administrator privileges and modifies both GAC and HKLM registry state.
- Use only on systems where legacy installer compatibility is required.
- Disable PowerShell 2.0 support when you are finished with it.
Please do not open public GitHub issues for suspected security vulnerabilities with PowerShell 2.0 or those easily nullified. We are already aware that PowerShell 2.0 has vulnerabilities, but sometimes you can't wait for vendors to update legacy installers.
To report a vulnerability with these files:
- Email: inquiries@exteran.com
- Subject: TogglePS2 Security Report
- Include:
- Affected commit/tag
- Reproduction steps
- Expected vs actual behavior
- Impact assessment
- Any logs or screenshots that help reproduce safely
You should receive an initial response within 30 calendar days if a response is required, or we might simply fix the code without responding. If the security vulnerability is easily nullified (i.e. performing the work offline or with firewall enabled), the code might not be updated and instead a notice posted to the ReadMe notifying users of the recommended workflow.
- Please allow time for investigation and remediation before public disclosure.
- After a fix is available, coordinated public disclosure is welcome.
- Run this tool only from a trusted local copy.
- Verify repository integrity before execution.
- Enable legacy components only immediately before required installs.
- Disable legacy components immediately after completion.
- Keep operation logs for audit/incident review.