« List of all vendors

git

List of Opam related CVEs (18 found)

CVE-2025-48384 – Git allows arbitrary code execution through broken config quoting
7/8/2025
Affected packages: conf-git
High severity
CVE-2025-48384 – Git allows arbitrary code execution through broken config quoting
7/8/2025
Affected packages: conf-git
High severity
CVE-2024-32002 – Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
5/14/2024
Affected packages: conf-git
Critical severity
CVE-2024-32002 – Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
5/14/2024
Affected packages: conf-git
Critical severity
CVE-2023-29007 – Arbitrary configuration injection via `git submodule deinit`
4/25/2023
Affected packages: conf-git
High severity
CVE-2023-29007 – Arbitrary configuration injection via `git submodule deinit`
4/25/2023
Affected packages: conf-git
High severity
CVE-2023-25652 – "git apply --reject" partially-controlled arbitrary file write
4/25/2023
Affected packages: conf-git
High severity
CVE-2023-25652 – "git apply --reject" partially-controlled arbitrary file write
4/25/2023
Affected packages: conf-git
High severity
CVE-2023-23946 – Git's `git apply` overwriting paths outside the working tree
2/14/2023
Affected packages: conf-git
Medium severity
CVE-2023-22490 – Git vulnerable to local clone-based data exfiltration with non-local transports
2/14/2023
Affected packages: conf-git
Medium severity
CVE-2022-23521 – gitattributes parsing integer overflow in git
1/17/2023
Affected packages: conf-git
Critical severity
CVE-2022-41903 – Integer overflow in `git archive`, `git log --format` leading to RCE in git
1/17/2023
Affected packages: conf-git
Critical severity
CVE-2022-39253 – Git subject to exposure of sensitive information via local clone of symbolic links
10/19/2022
Affected packages: conf-git
Medium severity
CVE-2022-39260 – Git vulnerable to Remote Code Execution via Heap overflow in `git shell`
10/19/2022
Affected packages: conf-git
High severity
CVE-2022-29187 – Bypass of safe.directory protections in Git
7/12/2022
Affected packages: conf-git
High severity
CVE-2021-21300 – malicious repositories can execute remote code while cloning
3/9/2021
Affected packages: conf-git
High severity
CVE-2020-11008 – Malicious URLs can still cause Git to send a stored credential to the wrong server
4/21/2020
Affected packages: conf-git
Medium severity
CVE-2020-5260 – malicious URLs may cause Git to present stored credentials to the wrong server
4/14/2020
Affected packages: conf-git
Critical severity