| Package | Affected versions | Patched versions |
|---|---|---|
| arq | ≤ 5.10 |
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free