Known vulnerabilities in libgit2 (Alpine package)

Known vulnerabilities in libgit2 (Alpine package)

Vendor: Alpine Linux Development Team

Software: libgit2 (Alpine package)

Software CPE: cpe:2.3:o:alpine:libgit2_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 8

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU23555 - Incorrect Default Permissions CVE-2019-1353	CWE-276	Low	No	No	0.28.4-r0	12.12.2019	SB2019121207 SB2019121209 SB2019121215 and 10 more
#VU23554 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-1348	CWE-22	Medium	No	No	0.28.4-r0	12.12.2019	SB2019121207 SB2019121209 SB2019121215 and 15 more
#VU23500 - Absolute Path Traversal CVE-2019-1351	CWE-36	Medium	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121209 and 10 more
#VU23494 - Improper input validation CVE-2019-1349	CWE-20	High	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121207 and 16 more
#VU23493 - Improper input validation CVE-2019-1350	CWE-20	High	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121209 and 11 more
#VU23492 - Improper input validation CVE-2019-1352	CWE-20	High	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121207 and 18 more
#VU23491 - Improper input validation CVE-2019-1354	CWE-20	High	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121209 and 10 more
#VU23488 - Improper input validation CVE-2019-1387	CWE-20	High	No	No	0.28.4-r0	10.12.2019	SB2019121019 SB2019121201 SB2019121207 and 19 more