12 matches found
CVE-2026-67325 vulnerabilities
Vulnerabilities for packages: checkov, datahub-ingestion-fips, opal, mlflow, datahub-ingestion, awx...
CVE-2026-67325 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
SUSE CVE-2026-67325
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...
Linux Distros Unpatched Vulnerability : CVE-2026-67325
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers ca...
CVE-2026-67325
creationtimestamp| type| source ---|---|--- 2026-08-01 21:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2egscm4b2z 2026-08-01 22:19:42+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3ms2ittk7ee2d 2026-08-03 04:36:04+00:00| seen|...
DEBIAN-CVE-2026-67325
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...
CVE-2026-67325
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...
CVE-2026-67325 GitPython before 3.1.51 Command Injection via option prefix abbreviation
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass the unsafe options guard by using abbreviated option names like uploadp instead of uploadpack, which git resolves to dangerous...
CVE-2026-67325
GitPython before 3.1.51 is vulnerable to a command injection issue due to an incomplete blocklist that does not account for git’s long-option prefix abbreviation. Attackers can bypass the unsafe options guard by using abbreviated option names (for example, upload_p instead of upload_pack); Git re...
CVE-2025-67325
creationtimestamp| type| source ---|---|--- 2026-01-08 19:51:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwqxzpsrf27 2026-01-08 20:36:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbwtihaakn22...
CVE-2025-67325
QloApps versions 1.7.0 and earlier are vulnerable to unrestricted file upload within the hotel review feature, specifically at the /module/qlohotelreview/default endpoint. The root cause is a lack of file extension validation, allowing uploaded files to be executed directly by the server without ...