CVE-2024-4982 Pagure: path traversal in view_issue_raw_file()

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server...

CVE-2024-4982

CVE-2024-4982 affects Pagure server. The credential leakage/secret exposure arises from a directory traversal vulnerability in the view_issue_raw_file() path handling, caused by insufficient input sanitization. This can allow a remote attacker to read arbitrary server files. Public advisories (Ub...

CVE-2024-4982

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted git repository they could discover secrets on the server...

CVE-2024-4981

The CVE-2024-4981 issue affects Pagure server and is described across multiple advisories as a vulnerability where a repository containing symbolic links can cause the server to reveal content outside the intended repository. Root cause per Debian advisory: _update_file_in_git() follows symbolic ...

CVE-2024-4981 Pagure: _update_file_in_git() follows symbolic links in temporary clones

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links, the server could unintentionally show incorporate and make visible content from outside the git repo...

OPENSUSE-SU-2025:0153-1 Security update for git-lfs

This update for git-lfs fixes the following issues: Update to 3.6.1: boo1235876: This release introduces a security fix for all platforms, which has been assigned CVE-2024-53263. When requesting credentials from Git for a remote host, prior versions of Git LFS passed portions of the host's URL to...

EulerOS 2.0 SP10 : git (EulerOS-SA-2025-1513)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the...

EulerOS 2.0 SP10 : git (EulerOS-SA-2025-1512)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the...

Security update for git-lfs (moderate)

openSUSE Security Update: Security update for git-lfs Announcement ID: openSUSE-SU-2025:0153-1 Rating: moderate References: 1235876 Cross-References: CVE-2024-53263 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This update f...

git bug fix and enhancement update

An update is available for git. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Git is a distributed revision control system with a decentralized architecture. A...

git bug fix and enhancement update

An update is available for git. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 8.10...

OPENSUSE-SU-2025:15056-1 389-ds-3.1.2~git90.2bc7250be-1.1 on GA media

These are all security issues fixed in the 389-ds-3.1.2git90.2bc7250be-1.1 package on the GA media of openSUSE Tumbleweed...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1416)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1415)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2025:15060-1 kanidm-1.6.0~git0.d7ae0f336-1.1 on GA media

These are all security issues fixed in the kanidm-1.6.0git0.d7ae0f336-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2025-46820: Exposure of Sensitive Information to an Unauthorized Actor

phpgt/Dom provides access to modern DOM APIs. Versions of phpgt/Dom prior to 4.1.8 expose the GITHUBTOKEN in the Dom workflow run artifact. The ci.yml workflow file uses actions/upload-artifact@v4 to upload the build artifact. This artifact is a zip of the current directory, which includes the...

Fedora 41 : kappanhang (2025-eecb0ea534)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-eecb0ea534 advisory. Update to git snapshot dffb773 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1416)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the...

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-1415)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a denial of service in go-git [CVE-2025-21614]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in go-git, caused by a flaw in in go-git clients that could alow attackers to provide specially crafted responses from a Git server which trigger a resource exhaustion CVE-2025-21614. Go-git is used in our...