Known vulnerabilities in git-core

Known vulnerabilities in git-core

Vendor: openEuler

Software: git-core

Software CPE: cpe:2.3:o:openeuler:git-core:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU152715 - Externally Controlled Reference to a Resource in Another Sphere CVE-2026-62960	CWE-610	Medium	No	No	2.43.0-13	29.09.2026	SB2026092904 SB2026092912 SB2026092913
#VU123998 - Exposure of sensitive information to an unauthorized actor CVE-2025-66413	CWE-200	Medium	Available	No	2.43.0-11	13.03.2026	SB2026031337 SB2026032063
#VU112646 - Product UI does not Warn User of Unsafe Actions CVE-2025-46835	CWE-356	Medium	No	No	2.33.0-19, 2.43.0-9	09.07.2025	SB2025070994 SB20250709121 SB2025071019 and 24 more
#VU112644 - Untrusted Search Path CVE-2025-46334	CWE-426	High	No	No	2.33.0-19, 2.43.0-9	09.07.2025	SB2025070994 SB20250709120 SB2025071892 and 5 more
#VU112643 - Improper input validation CVE-2025-27614	CWE-20	High	No	No	2.43.0-9	09.07.2025	SB2025070994 SB20250709119 SB2025071019 and 20 more
#VU112642 - Protection Mechanism Failure CVE-2025-27613	CWE-693	High	No	No	2.33.0-19, 2.43.0-9	09.07.2025	SB2025070994 SB20250709122 SB2025071019 and 22 more
#VU112639 - Memory corruption CVE-2025-48386	CWE-119	High	No	No	2.33.0-18, 2.33.0-19, 2.43.0-9	09.07.2025	SB2025070989 SB2025070990 SB2025070991 and 12 more
#VU112638 - Improper input validation CVE-2025-48385	CWE-20	High	No	No	2.43.0-9	09.07.2025	SB2025070989 SB2025070990 SB2025070991 and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2025-48384	CWE-93	Medium	Available	Exploited	2.33.0-18, 2.33.0-19, 2.43.0-9	09.07.2025	SB2025070989 SB2025070990 SB2025070991 and 54 more
#VU102871 - Improper Encoding or Escaping of Output CVE-2024-52005	CWE-116	Medium	No	No	2.33.0-17	16.01.2025	SB2025011641 SB2025021457 SB2025051343 and 18 more
#VU102870 - Improper Encoding or Escaping of Output CVE-2024-50349	CWE-116	Low	No	No	2.43.0-6	16.01.2025	SB2025011640 SB2025011641 SB2025011643 and 21 more
#VU102869 - Improper Encoding or Escaping of Output CVE-2024-52006	CWE-116	Low	No	No	2.43.0-6	16.01.2025	SB2025011640 SB2025011641 SB2025011643 and 21 more
#VU27258 - Insufficiently Protected Credentials CVE-2020-5260	CWE-522	Medium	Available	No	2.43.0-6	23.04.2020	SB2020042343 SB2020042344 SB2020042345 and 27 more