Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.0.6:*:*:*:*:*:*:*

part: a version: 1.0.6 update: *

VendorGit (6ebdb489-ead0-5dd4-8271-23d1b43b29e9)
ProductGit (a8ebe631-2ea3-5d47-a461-2c01c7e21d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/git/git purl2cpe 2026-06-01 10:15:42.869171
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:15:42.869172

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3906 vulnerable 2026-06-08 04:55:17.798693 Details available
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:26:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5516 vulnerable 2026-06-08 04:50:51.735261 Details available
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.
Published: 2009-01-20T16:00:00.000Z
Updated: 2024-08-07T10:56:46.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0477 vulnerable 2026-06-08 04:48:54.056091 Details available
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link.
Published: 2006-01-31T11:00:00.000Z
Updated: 2024-08-07T16:34:14.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.