[ Vendor · 5 CVEs ]
jelmer
CVEs affecting jelmer published in the last 30 days, plus any jelmer CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114097 | 21 Oct 2026 | CVSS 7.8 | jelmer dulwichDulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files… | |
| CVE-2026-114098 | 21 Oct 2026 | CVSS 7.8 | jelmer dulwichDulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the… | |
| CVE-2026-114094 | 21 Oct 2026 | CVSS 8.8 | jelmer dulwichDulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can… | |
| CVE-2026-114095 | 21 Oct 2026 | CVSS 6.5 | jelmer dulwichDulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite recursion via… | |
| CVE-2026-114096 | 21 Oct 2026 | CVSS 7.8 | jelmer dulwichDulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allows attackers to write… |