← Back to CVE List

CVE-2025-0509

Published: 2025-02-04T20:15Z
Last Modified: 2025-02-17T12:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt