sparkle-project vulnerabilities
3 published CVEs name sparkle-project among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-47122
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
sparkle-project · Sparkle
Medium4.2 - CVE-2026-47121
Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta
sparkle-project · Sparkle
Medium6.1 - CVE-2025-0509
Signing Checks Bypass
sparkle-project · Sparkle
High7.3