| Package | Affected versions | Patched versions |
|---|---|---|
| sparkle | < 2.6.4 | 2.6.4 |
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free