https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:57:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-02281 bdu:2024-02281 https://cve.radiocsirt.org/vuln/bdu:2024-02281 https://cve.radiocsirt.org/vuln/bit-git-2022-25648 <p><strong>Affected:</strong> Bitnami: git</p> <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p><strong>Affected:</strong> Bitnami: git</p> <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/bit-git-2022-25648 https://cve.radiocsirt.org/vuln/euvd-2026-167087 EUVD-2026-167087 https://cve.radiocsirt.org/vuln/euvd-2026-167087 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25648 <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25648 https://cve.radiocsirt.org/vuln/ghsa-69p6-wvmq-27gg <p><strong>Affected:</strong> RubyGems: git</p> <p>The package prior to v1.11.0 is vulnerable to Command Injection via git argument injection. When calling the `fetch(remote = &#39;origin&#39;, opts = {})` function, the remote parameter is passed to the `git fetch` subcommand in a way such that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p><strong>Affected:</strong> RubyGems: git</p> <p>The package prior to v1.11.0 is vulnerable to Command Injection via git argument injection. When calling the `fetch(remote = &#39;origin&#39;, opts = {})` function, the remote parameter is passed to the `git fetch` subcommand in a way such that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/ghsa-69p6-wvmq-27gg https://cve.radiocsirt.org/vuln/gsd-2022-25648 gsd-2022-25648 https://cve.radiocsirt.org/vuln/gsd-2022-25648 https://cve.radiocsirt.org/vuln/rhsa-2022:8506 <p>netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via &#39;{% debug %}&#39; template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API</p> <p>netty-codec: Bzip2Decoder doesn&#39;t allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn&#39;t restrict chunk length and may buffer skippable chunks in an unnecessary way django: Possible XSS via &#39;{% debug %}&#39; template tag nokogiri: ReDoS in HTML encoding detection ruby-git: package vulnerable to Command Injection via git argument injection rubygem-nokogiri: Improper Handling of Unexpected Data Type in Nokogiri sinatra: path traversal possible outside of public_dir when serving static files rubygem-rails-html-sanitizer: possible xss with certain configurations python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments foreman: foreman: OAuth secret exposure via unauthenticated access to the GraphQL API</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8506 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25648 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-git, Ubuntu:18.04:LTS: ruby-git, Ubuntu:20.04:LTS: ruby-git, Ubuntu:22.04:LTS: ruby-git, Ubuntu:24.04:LTS: ruby-git, Ubuntu:25.10: ruby-git, Ubuntu:26.04:LTS: ruby-git</p> <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-git, Ubuntu:18.04:LTS: ruby-git, Ubuntu:20.04:LTS: ruby-git, Ubuntu:22.04:LTS: ruby-git, Ubuntu:24.04:LTS: ruby-git, Ubuntu:25.10: ruby-git, Ubuntu:26.04:LTS: ruby-git</p> <p>The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = &#39;origin&#39;, opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-25648 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2059 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ruby-git ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ruby-git ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2059