Seafile server-controlled sync path can escape the client worktree (macOS/Linux)

Seafile server-controlled sync path can escape the client worktree macOS/Linux Vulnerability Overview The Seafile client's sync module applies file diffs delivered by the server during the checkout phase, and the target path of rename operations is fully controlled by the server. The validity che...

Malicious code in client-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506492c76e62a8122e2c85a6cbc0c4ca74db972b57a2b4876730316766d46673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1927 Malicious code in client-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 506492c76e62a8122e2c85a6cbc0c4ca74db972b57a2b4876730316766d46673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in client-sync

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...