| Package | Affected versions | Patched versions |
|---|---|---|
| gource | ≤ 0.26 |
Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free