Vulnerabilities

TI-2026-34714 CVE-2026-47122 · GHSA-g3hp-f6mg-559v

Missing authentication in sparkle-project Sparkle

LOW 18

Sparkle is a software update framework for macOS.

CVSS 3.1MEDIUM 4.2 Local Low privileges No interaction EPSS 0.00105 Published 2026-07-21 No fix listed CWE-306

TI-2026-34713 CVE-2026-47121 · GHSA-hg88-v3cw-3qrh

MEDIUM 60

Sparkle is a software update framework for macOS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00339 Published 2026-07-21 Fixed in 2.9.2 CWE-22

TI-2025-00423 CVE-2025-0509 · GHSA-wc9m-r3v6-9p5h

LOW 36

A security issue was found in Sparkle before version 2.6.4.

CVSS 3.1HIGH 7.3 Adjacent network High privileges User interaction EPSS 0.00904 Published 2025-02-04 Fixed in 2.6.4 CWE-552