11399 matches found
USN-5968-1: GitPython vulnerability
It was discovered that GitPython did not properly sanitize user inputs for remote URLs in the clone command. By injecting a maliciously crafted remote URL, an attacker could possibly use this issue to execute arbitrary commands on the host...
USN-5968-1 python-git vulnerability
It was discovered that GitPython did not properly sanitize user inputs for remote URLs in the clone command. By injecting a maliciously crafted remote URL, an attacker could possibly use this issue to execute arbitrary commands on the host...
Medium: git
Issue Overview: Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git...
Important: git
Issue Overview: Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for path...
curl: CVE-2023-28319: UAF in SSH sha256 fingerprint check
Vulnerability description not provided...
Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-113)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-113 advisory. Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked...
Amazon Linux 2023 : git, git-all, git-core (ALAS2023-2023-065)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-065 advisory. Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-1523)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2023-1548)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1523)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined b...
Updated ruby-git packages fix security vulnerability
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...
MGASA-2023-0097 Updated ruby-git packages fix security vulnerability
ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...
EulerOS 2.0 SP10 : git (EulerOS-SA-2023-1548)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined b...
CVE-2023-23946 affecting package git 2.33.6-1
CVE-2023-23946 affecting package git 2.33.6-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-22490 affecting package git 2.33.6-1
CVE-2023-22490 affecting package git 2.33.6-1. An upgraded version of the package is available that resolves this issue...
Vulnerabilities fixed in Microsoft Visual Studio
Microsoft has fixed vulnerabilities in Visual Studio. The vulnerabilities are located in the git code used by Visual Studio used and allow a malicious party to access gain access to sensitive data, or to execute arbitrary code execute code with the victim's privileges. Because Visual Studio is a...
cargo-generate (>=0.15.0, <=0.16.0), cargo-temp (>=0.2.11, <=0.2.13) +30 more potentially affected by unknown CVE via git-path (>=0.1.3, <=0.4.2)
git-path CARGO version =0.1.3, =0.15.0, =0.2.11, =11.0.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.29.0, =0.19.0, =0.16.0, =0.13.0, =0.17.0, =0.1.2, =0.7.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0026...
cargo-generate (>=0.13.1, <=0.16.0), cargo-smart-release (>=0.1.0, <=0.2.4) +44 more potentially affected by unknown CVE via git-hash (>=0.1.2, <=0.10.3)
git-hash CARGO version =0.1.2, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock 0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...
