https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T07:09:45.524315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-00458 cnvd-2016-00458 2026-10-04T07:09:45.528865+00:00 cnvd-2016-00458 https://cve.radiocsirt.org/vuln/euvd-2026-82577 EUVD-2026-82577 2026-10-04T07:09:45.528902+00:00 EUVD-2026-82577 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1899 fkie_cve-2016-1899 2026-10-04T07:09:45.528917+00:00

CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.

 https://cve.radiocsirt.org/vuln/ghsa-53jj-rpcg-6cc6 GHSA-53jj-rpcg-6cc6 2026-10-04T07:09:45.528946+00:00

CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.

 https://cve.radiocsirt.org/vuln/gsd-2016-1899 gsd-2016-1899 2026-10-04T07:09:45.528963+00:00 gsd-2016-1899 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10137-1 openSUSE-SU-2024:10137-1 — cgit-1.0-1.3 on GA media 2026-10-04T07:09:45.528974+00:00

cgit-1.0-1.3 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1899 Withdrawn: UBUNTU-CVE-2016-1899 2026-10-04T07:09:45.528995+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: cgit

CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.