11282 matches found
Command Injection
Overview git-commiters is a Statistical summary of various infomation about git commiter. Affected versions of this package are vulnerable to Command Injection via the gitCommiters API which allows specifying options such as cwd for current working directory and revisionRange as a revision pointe...
GHSA-G38C-WXJF-XRH6 `git-comiters` Command Injection vulnerability
Background on the vulnerability This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not saniti...
`git-comiters` Command Injection vulnerability
Background on the vulnerability This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not saniti...
@conventional-changelog/git-client has Argument Injection vulnerability
Background on exploitation This vulnerability manifests with the library's getTags API, which allows specifying extra parameters passed to the git log command. In another API by this library - getRawCommits there are secure practices taken to ensure that the extra parameter path is unable to inje...
GHSA-VH25-5764-9WCR @conventional-changelog/git-client has Argument Injection vulnerability
Background on exploitation This vulnerability manifests with the library's getTags API, which allows specifying extra parameters passed to the git log command. In another API by this library - getRawCommits there are secure practices taken to ensure that the extra parameter path is unable to inje...
SUSE-SU-2025:20721-1 Security update for git
This update for git fixes the following issues: - Update to 2.51.0 - UI, Workflows & Features - Userdiff patterns for the R language have been added. - Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information. - "git cat-file --batch" learns to...
PT-2025-39374
Name of the Vulnerable Software and Affected Versions git-commiters versions prior to 0.1.2 Description git-commiters is a Node.js function module used to provide committers statistics for a git repository. A command injection issue exists due to insufficient input sanitization and insecure proce...
PT-2025-39067
Name of the Vulnerable Software and Affected Versions Conventional Changelog versions prior to 2.0.0 Description The @conventional-changelog/git-client library, versions prior to 2.0.0, contains a flaw in the getTags API that allows for argument injection into the git log command. This occurs...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, local-path-provisioner, kserve-rest-proxy, secrets-store-csi-driver-provider-aws, nats, shfmt, vexctl, ctop, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, container-object-storage-interface, gitsign, kubeflow-katib, git-lfs,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: docker-credential-ecr-login, local-path-provisioner, kserve-rest-proxy, secrets-store-csi-driver-provider-aws, nats, shfmt, vexctl, ctop, sftpgo-plugin-geoipfilter, sftpgo-plugin-pubsub, container-object-storage-interface, gitsign, kubeflow-katib, git-lfs,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: newrelic-fluent-bit-output, nemo, custom-pod-autoscaler-operator, addon-resizer, terraform-provider-tls-fips, wazero-fips, prometheus-process-exporter, eks-distro-fips, container-object-storage-interface, azurefile-csi-fips, rancher-machine, vexctl, etcd-fips,...
CVE-2025-59457
In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...
JetBrains TeamCity Credentials Disclosure Vulnerability
JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a credential disclosure vulnerability that...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.60 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.60 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
[SECURITY] Fedora 42 Update: forgejo-12.0.3-1.fc42
Forgejo pronounced /for=CB=88d=CD=A1=CA=92e.jo/ is a lightweight software f orge. Use it to host git repositories, track their issues and allow people to contribute to them!...
[SECURITY] Fedora 43 Update: forgejo-12.0.3-1.fc43
Forgejo pronounced /for=CB=88d=CD=A1=CA=92e.jo/ is a lightweight software f orge. Use it to host git repositories, track their issues and allow people to contribute to them!...
JetBrains TeamCity < 2025.07.2 (CVE-2025-59457) (Windows)
The version of JetBrains TeamCity installed on the remote host is prior to 2025.07.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows CVE-2025-59457 Note that Nessus has not tested for this...
Security Bulletin: IBM Watsonx BI is affected by a vulnerability found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic.
Summary Watsonx BI has a vulnerability found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity...
