JG
Product
Jgit
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Jgit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-9390 | 9.8 | Feb 12 | Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode… Affected: before 3.4.2; 3.5.0 before 3.5.3 |
| CVE-2023-4759 | 8.8 | Sep 12 | Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used… Affected: before 5.13.3.202401111512-r; 6.6.0 before 6.6.0.202305301015; 6.7.0 before 6.7.0.202309050840 |
| CVE-2025-4949 | 5.3 | May 21 | In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git… Affected: before 5.13.4; 6.0.0 before 6.10.1.202505221210; 7.0.0 before 7.0.1.202505221510; 7.1.0 before 7.1.1.202505221757; 7.2.0 before 7.2.1.202505142326 |
Showing 3