| Package | Affected versions | Patched versions |
|---|---|---|
| tracker miners | ≥ 3.4.0, < 3.4.5≥ 3.5.0, < 3.5.3≥ 3.6.0, < 3.6.1< 3.3.2 | 3.4.53.5.33.6.13.3.2 |
A flaw was found in the tracker-miners package. A weakness in the sandbox allows a maliciously-crafted file to execute code outside the sandbox if the tracker-extract process has first been compromised by a separate vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free