Skip to content
OpenAdvisories

Package · Maven

com.linecorp.centraldogma:centraldogma-server-mirror-git

1 known vulnerabilities.

1 result · Feed

  • High 8.8

    Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

    A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and …