github.com/sparkle-project/Sparkle
Swift · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection | github.com/sparkle-project/Sparkle | Swift | Medium | No fix reported | |
| Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta | github.com/sparkle-project/Sparkle | Swift | Medium | Fix reported | |
| Sparkle Signing Checks Bypass | github.com/sparkle-project/Sparkle | Swift | High | Fix reported |