Search CVE reports


Toggle filters

11 – 20 of 1390 results


CVE-2025-4976

Medium priority
Ignored

An issue has been discovered in GitLab EE affecting all versions from 17.0 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under certain circumstances, could have allowed an attacker to access internal notes in...

1 affected package

gitlab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gitlab Not in release Not in release
Show less packages

CVE-2025-4949

Medium priority
Needs evaluation

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files...

1 affected package

jgit

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
jgit Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-49140

Medium priority
Needs evaluation

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP...

1 affected package

golang-github-pion-interceptor

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-github-pion-interceptor Needs evaluation Not in release
Show less packages

CVE-2025-48938

Medium priority
Needs evaluation

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in...

2 affected packages

golang-github-cli-go-gh, golang-github-cli-go-gh-v2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
golang-github-cli-go-gh Needs evaluation Not in release Not in release
golang-github-cli-go-gh-v2 Needs evaluation Not in release Not in release
Show less packages

CVE-2025-48386

Medium priority
Fixed

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The wincred credential helper uses a static buffer (target) as...

1 affected package

git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
git Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-48385

Medium priority
Fixed

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When cloning a repository Git knows to optionally fetch a...

1 affected package

git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
git Fixed Not affected Not affected Not affected
Show less packages

CVE-2025-48384

Medium priority
Fixed

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage...

1 affected package

git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
git Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-4700

Medium priority
Ignored

An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 18.0.5, 18.1 before 18.1.3, and 18.2 before 18.2.1 that, under specific circumstances, could have potentially allowed a successful attacker to...

1 affected package

gitlab

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gitlab Not in release Not in release
Show less packages

CVE-2025-46835

Medium priority
Fixed

Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file located in a maliciously named directory in the repository, then Git GUI...

1 affected package

git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
git Fixed Fixed Fixed Fixed
Show less packages

CVE-2025-46334

Medium priority
Not affected

Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on...

1 affected package

git

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
git Not affected Not affected Not affected Not affected
Show less packages