org.eclipse.jgit:org.eclipse.jgit.ant (3.5.0.201409071800-rc1), org.eclipse.jgit:org.eclipse.jgit.archive (3.5.0.201409071800-rc1) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.5.0.201409071800-rc1)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.5.0.201409071800-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 3.5.0.201409071800-rc1 -...

org.eclipse.jgit:org.eclipse.jgit.ant (4.5.6.201903121547-r), org.eclipse.jgit:org.eclipse.jgit.archive (4.5.6.201903121547-r) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.5.6.201903121547-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.5.6.201903121547-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.5.6.201903121547-r -...

ai.hyacinth.framework:core-service-config-server (>=0.5.0, <=0.5.24), at.nonblocking:nonsnapshot-maven-plugin (4.0.1) +3176 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (>=5.0.0.201805151920-m7, <=5.13.3.202401111512-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version =5.0.0.201805151920-m7, =0.5.0, =1.2.0, =0.0.2, =0.0.21, =5.0.0, =5.0.0, =5.0.0, =5.0.0, =0.0.11, =1.0.12, =0.0.1, =1.0.12, =1.0.30 and more Source cves: CVE-2025-4949 Source advisory: GHSA-VRPQ-QP53-QV56...

ch.cmbntr:modulizer-filetree (0.9.4), com.atlassian.jgitflow:jgit-flow-core (0.11) +30 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (2.3.1.201302201838-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 2.3.1.201302201838-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - ch.cmbntr:modulizer-filetree 0.9.4 - com.atlassian.jgitflow:jgit-flow-core 0.1...

blog.svenbayer:spring-cloud-contract-swagger (1.2.0.release), com.amdocs.zusammen.plugin:zusammen-collaboration-store-plugin (>=0.0.1, <=1.0.0) +84 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.6.0.201612231935-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.6.0.201612231935-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - blog.svenbayer:spring-cloud-contract-swagger 1.2.0.release -...

ai.pipestream:quarkus-grpc-gatherer-deployment (>=0.1.0, <=0.1.1), ch.admin.bit.jeap:jeap-archrepo-importer-messagetype (>=1.10.0, <=1.23.0) +184 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (7.1.0.202411261347-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 7.1.0.202411261347-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - ai.pipestream:quarkus-grpc-gatherer-deployment =0.1.0, =1.10.0, =1.10.0,...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=37.v0d3157c4a_ef8, <=63.v7e87d06b_a_30c), ch.admin.bit.jeap:jeap-initializer (>=2.6.0, <=4.3.0) +226 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (7.0.0.202409031743-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 7.0.0.202409031743-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - au.com.versent.jenkins.plugins:ignore-committer-strategy =37.v0d3157c4aef8,...

com.automattic.android:gradle-wordpresslibraries (>=1.0.0, <=1.1.2), com.netflix.nebula:gradle-git-scm-plugin (>=1.12.0-rc1, <=2.2.0) +34 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.3.0.201403021825-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.3.0.201403021825-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - com.automattic.android:gradle-wordpresslibraries =1.0.0, =1.12.0-rc1, =0.6.1,...

com.github.prokod:gradle-yar-plugin (0.2.0), com.github.sakserv:hadoop-mini-clusters (0.0.14) +38 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.3.1.201403241930-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.3.1.201403241930-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - com.github.prokod:gradle-yar-plugin 0.2.0 -...

net.trajano.wagon:wagon-git (2.0.1), org.eclipse.jgit:org.eclipse.jgit.ant (3.4.0.201406110918-r) +9 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.4.0.201406110918-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.4.0.201406110918-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - net.trajano.wagon:wagon-git 2.0.1 - org.eclipse.jgit:org.eclipse.jgit.ant...

org.eclipse.jgit:org.eclipse.jgit.ant (4.7.6.201810191618-r), org.eclipse.jgit:org.eclipse.jgit.archive (4.7.6.201810191618-r) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.7.6.201810191618-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.7.6.201810191618-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.7.6.201810191618-r -...

cn.home1:oss-configserver (>=1.0.6.oss, <=1.0.7.oss), com.apigee.edge.config:apigee-config-maven-plugin (>=1.5.4, <=1.5.5) +190 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.5.3.201412180710-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.5.3.201412180710-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - cn.home1:oss-configserver =1.0.6.oss, =1.5.4, =1, =0.4, =1.0.0, =2.8, =2.8,...

be.xvrt.release:be.xvrt.release.gradle.plugin (>=0.1.1, <=0.4.1), be.xvrt:release-plugin (>=0.1.1, <=0.4.1) +61 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.5.1.201410131835-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.5.1.201410131835-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - be.xvrt.release:be.xvrt.release.gradle.plugin =0.1.1, =0.1.1, =1.3.0,...

com.alexvasilkov:gradle-vcs-dependency (>=0.1.0, <=1.0.1), com.codegik:gitflow-maven-plugin (>=1.2.4, <=1.3.1) +78 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.7.0.201502260915-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.7.0.201502260915-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - com.alexvasilkov:gradle-vcs-dependency =0.1.0, =1.2.4, =1.0.0, =1.4.8, =1.0,...

org.eclipse.jgit:org.eclipse.jgit.ant (4.9.6.201810051924-r), org.eclipse.jgit:org.eclipse.jgit.archive (4.9.6.201810051924-r) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.9.6.201810051924-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.9.6.201810051924-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.9.6.201810051924-r -...

org.eclipse.jgit:org.eclipse.jgit.ant (4.9.4.201809090327-r), org.eclipse.jgit:org.eclipse.jgit.archive (4.9.4.201809090327-r) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.9.4.201809090327-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.9.4.201809090327-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.9.4.201809090327-r -...

org.eclipse.jgit:org.eclipse.jgit.ant (4.9.8.201812241815-r), org.eclipse.jgit:org.eclipse.jgit.archive (4.9.8.201812241815-r) +8 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.9.8.201812241815-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.9.8.201812241815-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.eclipse.jgit:org.eclipse.jgit.ant 4.9.8.201812241815-r -...

org.apache.nifi.registry:nifi-registry-framework (0.5.0), org.apache.nifi.registry:nifi-registry-toolkit-assembly (0.5.0) +13 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.11.8.201904181247-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.11.8.201904181247-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.apache.nifi.registry:nifi-registry-framework 0.5.0 -...

org.ajoberstar:gradle-git (>=0.1.0, <=0.1.1), org.eclipse.hudson.plugins:git (3.0.1) +4 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (1.2.0.201112221803-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 1.2.0.201112221803-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.ajoberstar:gradle-git =0.1.0, =0.9.5, =1.0.0.cr1, =1.0.0.cr1, =0.5.0.final...

ch.admin.bit.jeap:jeap-messaging-avro-maven-plugin (>=8.31.0, <=8.50.0), ch.admin.bit.jeap:jeap-messaging-registry-maven-plugin (>=8.31.0, <=8.50.0) +166 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (7.2.0.202503040940-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 7.2.0.202503040940-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - ch.admin.bit.jeap:jeap-messaging-avro-maven-plugin =8.31.0, =8.31.0, =2.59.0,...