CVE-2019-11549

An issue was discovered in GitLab Community and Enterprise Edition 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. Gitaly has allows an information disclosure issue where HTTP/GIT credentials are included in logs on connection errors...

CVE-2019-10802

giting version prior to 0.0.8 allows execution of arbritary commands. The first argument "repo" of function "pull" is executed by the package without any validation...

CVE-2018-25083

The pullit package before 1.4.0 for Node.js allows OS Command Injection because eval is used on an attacker-supplied Git branch name...

CVE-2018-20894

cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...

Oracle Linux 9 : git-lfs (ELSA-2025-7256)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7256 advisory. 3.6.1-1 - Update to 3.6.1 - Resolves: RHEL-73940 3.6.0-1 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936,...

Oracle Linux 9 : git (ELSA-2025-7409)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7409 advisory. 2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 Tenable has extracted the preceding description block directly from the...

org.arquillian.cube:arquillian-cube-openshift (>=1.0.0.alpha9, <=1.18.2), org.arquillian.universe:arquillian-cube-openshift (>=1.0.0.alpha3, <=1.0.0.alpha4) +10 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.0.0.201506090130-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.0.0.201506090130-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.arquillian.cube:arquillian-cube-openshift =1.0.0.alpha9, =1.0.0.alpha3,...

org.apache.sshd:sshd-git (0.12.0), org.eclipse.jgit:org.eclipse.jgit.ant (3.4.0.201405281120-rc2) +9 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (3.4.0.201405281120-rc2)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 3.4.0.201405281120-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - org.apache.sshd:sshd-git 0.12.0 - org.eclipse.jgit:org.eclipse.jgit.ant...

git security update

2.47.1-2 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513...

@lavamoat/git-safe-dependencies (>=0.1.1, <=0.2.1) potentially affected by CVE-2025-4759 via lockfile-lint-api (5.9.1)

lockfile-lint-api NPM version 5.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on lockfile-lint-api and may be impacted: - @lavamoat/git-safe-dependencies =0.1.1, =0.2.1 Source cves: CVE-2025-4759 Source advisory: GHSA-7CFR-5CJF-32P4...

@lavamoat/git-safe-dependencies (>=0.1.1, <=0.2.1) potentially affected by CVE-2025-4759 via lockfile-lint-api (5.9.1)

lockfile-lint-api NPM version 5.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on lockfile-lint-api and may be impacted: - @lavamoat/git-safe-dependencies =0.1.1, =0.2.1 Source cves: CVE-2025-4759 Source advisory: OSV:GHSA-7CFR-5CJF-32P4...

git-lfs security update

3.6.1-1 - Update to 3.6.1 - Resolves: RHEL-73940 3.6.0-1 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 3.4.1-3 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 3.4.1-2 - Rebuild with new Golang - Resolves: RHEL-32571 3.4.1-1 - Update to...

RHSA-2025:7640 Red Hat Security Advisory: git security update

Bulletin has no description...

RHSA-2025:7641 Red Hat Security Advisory: git security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

git: The sideband payload is passed unfiltered to the terminal in git

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

Moderate: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : git (RHSA-2025:7641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7641 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

RHEL 9 : git (RHSA-2025:7640)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7640 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...