Known vulnerabilities in cgit (Alpine package)

Vendor: Alpine Linux Development Team
Software: cgit (Alpine package)
Software CPE: cpe:2.3:o:alpine:cgit_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cgit (Alpine package) cgit (Alpine package) is affected by 6 known vulnerabilities: 2 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU14196 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-14912		 CWE-22 High
Available
No
 1.0-r2 03.08.2018 SB2018080609
SB2018080610
SB2018080611
and 3 more
#VU32343 - Memory corruption
CVE-2016-1901		 CWE-119 High
No
No
 0.10.2-r0 20.01.2016 SB2016012006
SB2016021104
SB2016011602
and 3 more
#VU32342 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1900		 CWE-79 Low
No
No
 0.10.2-r0 20.01.2016 SB2016012005
SB2016021103
SB2016011602
and 3 more
#VU32341 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-1899		 CWE-79 Low
No
No
 0.10.2-r0 20.01.2016 SB2016012004
SB2016021102
SB2016011602
and 3 more
#VU32667 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-2117		 CWE-22 Medium
No
No
 0.9.2-r0 09.08.2013 SB2013080901
SB2013052801
SB2013052803
and 1 more
#VU33883 - Improper input validation
CVE-2013-1994		 CWE-20 Medium
No
No
 0.9.2-r0 15.06.2013 SB2013052802