| Package | Affected versions | Patched versions |
|---|---|---|
| arq | < 5.9.7 | 5.9.7 |
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free