4 matches found
BIT-JAVA-2025-0509 Signing Checks Bypass
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...
7.3CVSS7.2AI score0.00886EPSS
SaveExploits0References4
PT-2026-38031
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks...
7.3CVSS7.2AI score0.00886EPSS
SaveExploits0References5
20