Lucene search
+L

11559 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.13 views

JetBrains IntelliJ IDEA < 2026.1.5 Git Credential Disclosure

The version of JetBrains IntelliJ IDEA installed on the remote host is prior to 2026.1.5. It is, therefore, affected by an information disclosure vulnerability: - In JetBrains IntelliJ IDEA before 2026.1.5 Git credentials were written in plaintext to the IDE log. CVE-2026-75057 Note that Nessus h...

6.2CVSS5.9AI score0.00133EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/20 12:00 a.m.29 views

PT-2026-78939

Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.69 n8n versions 2.x prior to 2.33.4 n8n versions 2.x prior to 2.34.1 Description A code execution issue exists in the Git node. The node executes specific repository-local git configuration values without proper...

7.7CVSS5.8AI score0.004EPSS
SaveExploits0References7
Oracle linux
Oracle linux
added 2026/08/20 12:00 a.m.17 views

ansible-core security update

2.16.16-2.0.1.el102.1 - exclude telemetry from Oracle Linux 1:2.16.16-2.1 - Fix CVE-2026-11332 ansible-galaxy role installs could allow arbitrary git configuration injection via malformed role requirements RHEL-194128...

7.8CVSS5.5AI score0.00222EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-76221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directiv...

8.8CVSS8AI score0.00485EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-76218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a...

8.8CVSS6.8AI score0.0072EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.17 views

Oracle Linux 10 : ansible-core (ELSA-2026-57148)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57148 advisory. 2.16.16-2.0.1.el102.1 - exclude telemetry from Oracle Linux 1:2.16.16-2.1 - Fix CVE-2026-11332 ansible-galaxy role installs could allow arbitrary git...

7.8CVSS5.8AI score0.00222EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/08/19 8:50 p.m.17 views

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

7.8CVSS6.3AI score0.00222EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/19 8:18 p.m.16 views

ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution

A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field...

7.8CVSS6.3AI score0.00222EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2026/08/19 3:32 p.m.7 views

Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-hmq2-w58f-27jc. This link is maintained to preserve external references. Original Description GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git...

8.4CVSS7.4AI score0.00333EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2026/08/19 3:32 p.m.5 views

Duplicate Advisory: GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9rj7-rf2p-w77r. This link is maintained to preserve external references. Original Description GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options...

8.8CVSS6.7AI score0.0072EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2026/08/19 2:17 p.m.10 views

CVE-2026-76219

GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree methods that append caller-influenced treeish strings to git read-tree without option validation or argument separation. Attackers can inject the...

8.1CVSS0.00299EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/19 2:17 p.m.12 views

CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...

8.8CVSS0.0072EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/19 2:17 p.m.11 views

CVE-2020-37267

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

8.7CVSS0.00314EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/19 2:17 p.m.11 views

UBUNTU-CVE-2026-76218

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a template parameter pointing to a directory with malicious git hooks that execute arbitrary code when git operations are performed on the...

8.8CVSS6.6AI score0.0072EPSS
SaveExploits1References3
OSV
OSV
added 2026/08/19 2:17 p.m.13 views

UBUNTU-CVE-2026-76217

GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply --pathspec-from-file and --pathspec-file-nul parameters to read arbitrary files accessible to the process, with full file contents...

7.1CVSS6AI score0.0036EPSS
SaveExploits1References3
CVE
CVE
added 2026/08/19 2:02 p.m.50 views

CVE-2026-76222

GitPython (versions before 3.1.58) fails to sanitize submodule names read from .gitmodules files, enabling path traversal during submodule initialization. An attacker can craft a malicious repository with traversal sequences (e.g., ../) in submodule names, causing GitPython to create attacker-con...

8.4CVSS5.5AI score0.00333EPSS
SaveExploits1References2Affected Software1
EUVD
EUVD
added 2026/08/19 2:02 p.m.13 views

EUVD-2026-62462

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

8.8CVSS5.9AI score0.00485EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2026/08/19 2:02 p.m.17 views

CVE-2026-76220

GitPython before 3.1.58 contains a command execution vulnerability in the checkunsafeoptions guard that can be bypassed by combining a single-character kwarg with splitsinglecharoptions=False. Attackers can supply a crafted kwargs dictionary to guarded methods like clonefrom to emit a joined toke...

8.8CVSS5.8AI score0.0057EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2026/08/19 2:02 p.m.9 views

CVE-2026-76221

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

8.8CVSS7.5AI score0.00485EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/08/19 2:02 p.m.12 views

CVE-2026-76221 GitPython before 3.1.58 Config Injection via option-name

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace into option names. Attackers can inject malicious option names like 'sshComman...

8.8CVSS5.9AI score0.00485EPSS
SaveExploits1References2
Rows per page
Query Builder