Are CocoaPods in the specs repo the only official releases?

Question

I thought the CocoaPods specs repo listed all officially released versions of a project, but we\'ve found vulnerabilities for versions not in the specs repo, like this which say