Skip to content
OpenAdvisories
Unscored DSA-3545-1 3 CVEs

cgit - security update

Published Apr 7, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 cgit 0.10.2.git2.0.1-3+deb8u1

Vulnerabilities 3

  • Unscored —
    CVE-2016-1899

    CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTT…

    cgit Debian
  • Unscored —
    CVE-2016-1900

    CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote a…

    cgit Debian
  • Unscored —
    CVE-2016-1901

    Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impa…

    cgit Debian