https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:27:00.468252+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-535 certfr-2014-avi-535 — Une vulnérabilité a été corrigée dans <span class="textit">Apple Xcode</span>. Elle permet à un attaquant de provoquer… 2026-10-03T12:27:00.473554+00:00 certfr-2014-avi-535 https://cve.radiocsirt.org/vuln/euvd-2026-103759 EUVD-2026-103759 2026-10-03T12:27:00.473589+00:00 EUVD-2026-103759 https://cve.radiocsirt.org/vuln/fkie_cve-2014-9390 fkie_cve-2014-9390 2026-10-03T12:27:00.473603+00:00

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

 https://cve.radiocsirt.org/vuln/ghsa-6vvc-c2m3-cjf3 GHSA-6vvc-c2m3-cjf3 — JGit Improper Input Validation vulnerability 2026-10-03T12:27:00.473643+00:00

Affected: Maven: org.eclipse.jgit:org.eclipse.jgit, PyPI: mercurial

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine; libgit2; Egit; and JGit allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

 https://cve.radiocsirt.org/vuln/gsd-2014-9390 gsd-2014-9390 2026-10-03T12:27:00.473671+00:00 gsd-2014-9390 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10099-1 openSUSE-SU-2024:10099-1 — git-2.11.0-1.1 on GA media 2026-10-03T12:27:00.473683+00:00

git-2.11.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2020-217 PYSEC-2020-217 2026-10-03T12:27:00.473699+00:00

Affected: PyPI: mercurial

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-9390 UBUNTU-CVE-2014-9390 2026-10-03T12:27:00.473720+00:00

Affected: Ubuntu:14.04:LTS: git, Ubuntu:14.04:LTS: mercurial, Ubuntu:Pro:14.04:LTS: libgit2

Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.