| Package | Affected versions | Patched versions |
|---|---|---|
| sng | = 1.0.2 |
sng_regress in SNG 1.0.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/recompiled$$.png, (2) /tmp/decompiled$$.sng, and (3) /tmp/canonicalized$$.sng temporary files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free