aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +110 more potentially affected by CVE-2026-47712 via dulwich (>=0.24.1, <=1.2.1)

dulwich PYPI version =0.24.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: CVE-2026-47712 Source advisory: OSV:PYSEC-2026-2462...

CVE-2026-47712

creationtimestamp| type| source ---|---|--- 2026-06-11 02:39:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mny74lz6422c...

CVE-2026-47712

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.formatpatchoutdir=... derives each patch filename from the commit's subject line. Prior to this fix, getsummary only replaced spaces with dashes ...

CVE-2026-47712 Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`

Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5, dulwich.porcelain.formatpatchoutdir=... derives each patch filename from the commit's subject line. Prior to this fix, getsummary only replaced spaces with dashes ...

aiidalab (>=22.6.0, <=26.9.0), aiidalab-dlpoly (>=0.1.0, <=0.2.0) +110 more potentially affected by CVE-2026-47712 via dulwich (>=0.24.1, <=1.2.1)

dulwich PYPI version =0.24.1, =22.6.0, =0.1.0, =0.1.0, =1.3.4, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.2.1, =0.2.1, =0.3.0, =0.8.3, =0.1.0, =0.1.6 and more Source cves: CVE-2026-47712 Source advisory: MEND:CVE-2026-47712...

Linux Distros Unpatched Vulnerability : CVE-2026-47712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dulwich is a pure-Python implementation of the Git file formats and protocols. Starting in version 0.24.0 and prior to version 1.2.5,...