PT-2025-39374

Name of the Vulnerable Software and Affected Versions git-commiters versions prior to 0.1.2 Description git-commiters is a Node.js function module used to provide committers statistics for a git repository. A command injection issue exists due to insufficient input sanitization and insecure proce...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, gostatsd, container-object-storage-interface, k8sgpt-operator, git-lfs, grafana-operator, lvm-driver, mongodb-kubernetes-operator, shfmt, cloud-provider-aws, secrets-store-csi-driver-provider-aws, addon-resizer, custom-pod-autoscaler-operator,...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: linkerd2-proxy-init, gostatsd, container-object-storage-interface, k8sgpt-operator, git-lfs, grafana-operator, lvm-driver, mongodb-kubernetes-operator, shfmt, cloud-provider-aws, secrets-store-csi-driver-provider-aws, addon-resizer, custom-pod-autoscaler-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: terraform-provider-time, pvc-autoresizer, dagdotdev, newrelic-fluent-bit-output, newrelic-nri-statsd, node-problem-detector-fips, kserve-rest-proxy, prometheus-nats-exporter, hivemind, cloud-provider-aws, etcd-fips, nvidia-nsight-compute-12.8, git-lfs,...

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

JetBrains TeamCity Credentials Disclosure Vulnerability

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a credential disclosure vulnerability that...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.60 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.60 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

[SECURITY] Fedora 42 Update: forgejo-12.0.3-1.fc42

Forgejo pronounced /for=CB=88d=CD=A1=CA=92e.jo/ is a lightweight software f orge. Use it to host git repositories, track their issues and allow people to contribute to them!...

[SECURITY] Fedora 43 Update: forgejo-12.0.3-1.fc43

Forgejo pronounced /for=CB=88d=CD=A1=CA=92e.jo/ is a lightweight software f orge. Use it to host git repositories, track their issues and allow people to contribute to them!...

JetBrains TeamCity < 2025.07.2 (CVE-2025-59457) (Windows)

The version of JetBrains TeamCity installed on the remote host is prior to 2025.07.2. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows CVE-2025-59457 Note that Nessus has not tested for this...

Security Bulletin: IBM Watsonx BI is affected by a vulnerability found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic.

Summary Watsonx BI has a vulnerability found in yarnpkg Yarn up to 1.22.22. It has been classified as problematic. Affected is the function explodeHostedGitFragment of the file src/resolvers/exotics/hosted-git-resolver.js. The manipulation leads to inefficient regular expression complexity...

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

CVE-2025-59457

CVE-2025-59457 affects JetBrains TeamCity before 2025.07.2. The issue is a missing Git URL validation that can lead to credential leakage on Windows. Root cause: lack of proper validation for Git URLs. Impact: potential disclosure of credentials (high confidentiality impact) with network attack v...

CVE-2025-59457

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

PT-2025-38135

Name of the Vulnerable Software and Affected Versions: TeamCity versions prior to 2025.07.2 Description: A missing Git URL validation in TeamCity allowed credential leakage on Windows systems. Recommendations: Update TeamCity to version 2025.07.2 or later...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a Continuous Integration/Continuous Deployment CI/CD tool developed by JetBrains to automate the software build, test, and deployment process with support for multiple programming languages and tools. JetBrains TeamCity suffers from a credential disclosure vulnerability that...

CVE-2025-59457: Permissive List of Allowed Inputs

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

The vulnerability of the go-git library, related to improper restrictions on the path to a limited catalog, allows attackers to create, modify files, or execute arbitrary code.

The vulnerability of the go-git library is related to improper restrictions on the path to a limited catalog. Exploiting this vulnerability allows an attacker to create, modify files, or execute arbitrary code remotely...