JLSEC-2025-3 Lack of validation for user-provided fields in GitForge.jl

Description There is a lack of input validation for user-provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not validated or safely encoded and are sent directly to the server. Impact...

CVE-2025-52569

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the GitHub.repo function, the user can provide any string for the reponame field. These inputs are not validate...

CVE-2025-50178

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not...

CVE-2025-50178

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not...

CVE-2025-50178

GitForge.jl vulnerability (CVE-2025-50178) stems from lack of input validation in GitForge.get_repo for GitHub where owner and repo strings are not validated or safely encoded, allowing path traversal like ../ to reach unintended GitHub API endpoints. Affected versions: prior to 0.4.3; patch avai...

CVE-2025-50178 GitForge.jl lacks validation for user provided fields

GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions. In the GitForge.getrepo function for GitHub, the user can provide any string for the owner and repo fields. These inputs are not...

Julia GitForge 输入验证错误漏洞

Julia GitForge is a Julia open source interface for interacting with Git forges. An input validation error vulnerability exists in Julia GitForge versions prior to 0.4.3, which stems from a lack of input validation and could lead to path traversal attacks...

Julia GitForge 输入验证错误漏洞

Julia GitForge is a Julia open source interface for interacting with Git forges. An input validation error vulnerability exists in Julia GitForge versions prior to 5.9.1, which stems from a lack of input validation and could lead to a path traversal attack...