Skip to content
OpenAdvisories
Unscored USN-8757-1 1 CVE

cgit vulnerability

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Ubuntu

Summary

It was discovered that cgit incorrectly handled repository paths when HTTP
cloning was enabled. A remote attacker could possibly use this issue to
access files outside the repository and obtain sensitive information.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS cgit 0.11.2.git2.3.2-1.1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2018-14912 Public exploit Scanner template EPSS 92%

    cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turne…

    cgit cgit cgit Debian Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2018-14912