Known vulnerabilities in perl-Git

Vendor: openEuler
Software: perl-Git
Software CPE: cpe:2.3:o:openeuler:perl-git:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 33
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting perl-Git perl-Git is affected by 33 known vulnerabilities: 13 high, 11 medium, 9 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152715 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2026-62960		 CWE-610 Medium
No
No
 2.43.0-13 29.09.2026 SB2026092904
SB2026092912
SB2026092913
#VU123998 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66413		 CWE-200 Medium
Available
No
 2.43.0-11 13.03.2026 SB2026031337
SB2026032063
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835		 CWE-356 Medium
No
No
 2.27.0-25, 2.33.0-19, 2.43.0-9 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 24 more
#VU112644 - Untrusted Search Path
CVE-2025-46334		 CWE-426 High
No
No
 2.27.0-25, 2.33.0-19, 2.43.0-9 09.07.2025 SB2025070994
SB20250709120
SB2025071892
and 5 more
#VU112643 - Improper input validation
CVE-2025-27614		 CWE-20 High
No
No
 2.43.0-9 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 20 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613		 CWE-693 High
No
No
 2.27.0-25, 2.33.0-19, 2.43.0-9 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112639 - Memory corruption
CVE-2025-48386		 CWE-119 High
No
No
 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 12 more
#VU112638 - Improper input validation
CVE-2025-48385		 CWE-20 High
No
No
 2.43.0-9 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384		 CWE-93 Medium
Available
Exploited
 2.27.0-24, 2.33.0-18, 2.33.0-19, 2.43.0-9 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 54 more
#VU102871 - Improper Encoding or Escaping of Output
CVE-2024-52005		 CWE-116 Medium
No
No
 2.33.0-17 16.01.2025 SB2025011641
SB2025021457
SB2025051343
and 18 more
#VU102870 - Improper Encoding or Escaping of Output
CVE-2024-50349		 CWE-116 Low
No
No
 2.43.0-6 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102869 - Improper Encoding or Escaping of Output
CVE-2024-52006		 CWE-116 Low
No
No
 2.43.0-6 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465		 CWE-94 High
No
No
 2.27.0-17 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021		 CWE-61 Medium
No
No
 2.27.0-17 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020		 CWE-62 Medium
No
No
 2.27.0-17 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002		 CWE-434 High
Available
No
 2.27.0-17 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004		 CWE-94 High
No
No
 2.27.0-17 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652		 CWE-59 Low
No
No
 2.27.0-14 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU68517 - Improper input validation
CVE-2022-39253		 CWE-20 Low
Available
No
 2.27.0-9, 2.27.0-12, 2.27.0-17 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 41 more
#VU27258 - Insufficiently Protected Credentials
CVE-2020-5260		 CWE-522 Medium
Available
No
 2.23.0-16, 2.43.0-6 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 27 more


Showing elements 1 - 20 out of 33