Skip to content
OpenAdvisories
Unscored DSA-4263-1 1 CVE

cgit - security update

Published Aug 4, 2018 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 cgit 1.1+git2.10.2-3+deb9u1

Vulnerabilities 1

  • Unscored —
    CVE-2018-14912 Public exploit Scanner template EPSS 92%

    cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turne…