Approved changes feed: RSS · Atom

cpe:2.3:a:eclipse:egit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEclipse (fa988180-604e-5c1f-93ea-65b5297000fc)
ProductEgit (7218a2c8-3e03-5ad8-a102-b4498d8a7dfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/eclipse-egit purl2cpe 2026-06-01 10:15:03.204368
pkg:deb/ubuntu/eclipse-egit purl2cpe 2026-06-01 10:15:03.204371
pkg:maven/org.eclipse.mylyn.github/org.eclipse.egit.github.core purl2cpe 2026-06-01 10:15:03.204374
pkg:rpm/fedora/eclipse-egit purl2cpe 2026-06-01 10:15:03.204377
pkg:rpm/opensuse/eclipse-egit purl2cpe 2026-06-01 10:15:03.204380

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9390 vulnerable 2026-06-03 14:34:26.799139 Details available
Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.
Published: 2020-02-12T01:58:27.000Z
Updated: 2024-08-06T13:40:25.038Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.