Lucene search
+L

248 matches found

Github Security Blog
Github Security Blog
added 2026/05/29 7:45 p.m.18 views

Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta

Summary Binary delta apply intermediate-symlink traversal in malicious .delta Autoupdate/SUBinaryDeltaApply.m enforces relativePath.pathComponents containsObject:@".." and rejects writes whose immediate parent directory IS itself a symbolic link, but does not detect symlinks deeper in the relativ...

6.1CVSS5.8AI score0.00229EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder