Git

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.4.4.3:*:*:*:*:*:*:*

part: a version: 1.4.4.3 update: *

VendorGit (6ebdb489-ead0-5dd4-8271-23d1b43b29e9)
ProductGit (a8ebe631-2ea3-5d47-a461-2c01c7e21d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/git/git purl2cpe 2026-06-01 10:15:42.916287
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:15:42.916290

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3906 vulnerable 2026-06-08 04:55:17.828027 Details available
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:26:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5916 vulnerable 2026-06-08 04:50:53.591073 Details available
gitweb/gitweb.perl in gitweb in Git 1.6.x before 1.6.0.6, 1.5.6.x before 1.5.6.6, 1.5.5.x before 1.5.5.6, 1.5.4.x before 1.5.4.7, and other versions after 1.4.3 allows local repository owners to execute arbitrary commands by modifying the diff.external configuration variable and executing a crafted gitweb query.
Published: 2009-01-21T02:00:00.000Z
Updated: 2024-08-07T11:13:13.759Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5516 vulnerable 2026-06-08 04:50:51.757487 Details available
The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.
Published: 2009-01-20T16:00:00.000Z
Updated: 2024-08-07T10:56:46.863Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.