[SECURITY] Fedora 36 Update: golang-github-google-slothfs-0-0.10.20200727git59c1163.fc36

SlothFS is a FUSE filesystem that provides light-weight, lazily downloaded, read-only checkouts of manifest-based Git projects. It is intended for use wi th Android...

[SECURITY] Fedora 36 Update: git-time-metric-1.3.5-14.fc36

Simple, seamless, lightweight time tracking for Git...

FreeBSD : gitea -- Escape git fetch remote (95ee401d-cc6a-11ec-9cfc-10c37b4ac2ea)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 95ee401d-cc6a-11ec-9cfc-10c37b4ac2ea advisory. - The Gitea team reports: Escape git fetch remote in services/migrations/giteauploader.go...

Command Injection

git-pull-or-clone is vulnerable to command injection. A remote attacker is able to inject malicious command-line arguments to be executed on the OS through the gitClone function via the --upload-pack feature of git...

CVE-2022-1502

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions...

CVE-2022-1502

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions...

CVE-2022-1502

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions...

Code injection

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions...

CVE-2022-1502

CVE-2022-1502 affects Octopus Server/Octopus Deploy where the API failed to properly verify permissions for projects that use Git version control. The flaw allowed a user with only ProjectView permissions to modify such projects, indicating insufficient access checks in the Git-enabled workflow. ...

CVE-2022-1502

Permissions were not properly verified in the API on projects using version control in Git. This allowed projects to be modified by users with only ProjectView permissions...

Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. A security vulnerability in all 2021.3.x versions prior to Octopus Server version 2021.3.12725 and all 2022.1.x versions prior to 2022.1.2454 stems from not properly validating permissions in the API for projects that use Git version control. Th...

PT-2022-13917 · Octopus Deploy +1 · Octopus Server +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns improper verification of permissions in the API for projects using Git version control. This flaw allows users with only ProjectView...

CVE-2021-41959

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak...

CVE-2021-41959

Removed by vendor...

CVE-2021-41959

CVE-2021-41959 affects JerryScript (Git version 14ff5bf). The issue is a memory leak caused by insufficient tracking/freeing of allocated memory in jerry-core/ecma/operations/ecma-regexp-object.c after a RegExp. Multiple connected sources confirm the same root cause, and have not publicly detaile...

OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

GHSA-3X62-X456-Q2VM OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

JerryScript Git 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript Git version 14ff5bf, which stems from not adequately tracking and freeing allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after a RegExp...

SUSE: Security Advisory (SUSE-SU-2022:1484-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: git / git-arch / git-core / git-credential-gnome-keyring / etc (SUSE-SU-2022:1484-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1484-1 advisory. - Updated to version 2.35.3: - CVE-2022-24765: Fixed a potential command injection via git worktree...