Skip to content
OpenAdvisories

Package · crates.io

libgit2-sys

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.6
    GHSA-22q8-ghmq-63vf

    libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2

    The [libgit2](https://github.com/libgit2/libgit2/) project fixed three security issues in the 1.7.2 release. These issues are: * The `git_revparse_single` function can potentially enter an infinite loop on a well-crafted input, potentially causing a Denial of…

    libgit2-sys crates.io
  • Medium 5.3
    CVE-2023-22742

    libgit2 fails to verify SSH keys by default

    libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_che…

    libgit2 libgit2 libgit2 libgit2 Debian Ubuntu Alpine crates.io