Git

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.4.3.1:*:*:*:*:*:*:*

part: a version: 1.4.3.1 update: *

VendorGit (6ebdb489-ead0-5dd4-8271-23d1b43b29e9)
ProductGit (a8ebe631-2ea3-5d47-a461-2c01c7e21d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/git/git purl2cpe 2026-06-01 10:15:42.906220
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:15:42.906222

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3906 vulnerable 2026-06-08 04:55:17.822658 Details available
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:26:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5916 vulnerable 2026-06-08 04:50:53.590903 Details available
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Published: 2009-01-21T02:00:00.000Z
Updated: 2024-08-07T11:13:13.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5516 vulnerable 2026-06-08 04:50:51.752318 Details available
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.
Published: 2009-01-20T16:00:00.000Z
Updated: 2024-08-07T10:56:46.863Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.