Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2025-0509
Disclosure Date: February 04, 2025 (last updated February 17, 2025)
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.
0
Attacker Value
Unknown
CVE-2021-20084
Disclosure Date: April 23, 2021 (last updated November 28, 2024)
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype.
0
