org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source (>=2.0.0-beta-1, <=2.1.2), org.jenkins-ci.plugins:git (>=2.6.0, <=2.6.5) +5 more potentially affected by CVE-2025-67640 via org.jenkins-ci.plugins:git-client (1.21.0)

org.jenkins-ci.plugins:git-client MAVEN version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-client and may be impacted: - org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source =2.0.0-beta-1, =2.6.0, =1.0,...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2022-38663 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2022-38663 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2022-36882 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2022-36882 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2021-21684 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2021-21684 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2020-2136 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2020-2136 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2022-30949 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2022-30949 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2022-30947 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2022-30947 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2017-1000092 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2017-1000092 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2018-1000182 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2018-1000182 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2019-1003010 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2019-1003010 Source advisory:...

org.jenkins-ci.plugins:git-bisect (>=1.0, <=1.3) potentially affected by CVE-2018-1000110 via org.jenkins-ci.plugins:git (2.6.0)

org.jenkins-ci.plugins:git MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git and may be impacted: - org.jenkins-ci.plugins:git-bisect =1.0, =1.3 Source cves: CVE-2018-1000110 Source advisory:...

openSUSE: Security Advisory for git (openSUSE-SU-2021:2555-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

curl: Connect-only connections can use the wrong connection

Summary: If a connect-only easy handle is not read from or written to, its connection can time out and be closed. If a new connection is created it can be allocated at the same address, causing the easy handle to use the new connection. This new connection may not be connected to the same server ...

shopify-scripts: Invalid read in `str_replace_partial`

PoC === The attached POC shows an invalid read. Debug info ========== The issue happens when memmove is called inside strreplacepartial. valgrind report: 0==27051== Invalid read of size 1 ==27051== at 0x483FA10: memmove vgreplacestrmem.c:1270 ==27051== by 0x135D60: strreplacepartial string.c:1193...