CVE-2026-47122
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.2 / 10
Vulnerability Description
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
swift
Product
github.com/sparkle-project/Sparkle
Discussion (0)
Add Comment
No comments yet. Be the first!