Approved changes feed: RSS · Atom

cpe:2.3:a:git:git:1.5.6.6:rc2:*:*:*:*:*:*

part: a version: 1.5.6.6 update: rc2

VendorGit (6ebdb489-ead0-5dd4-8271-23d1b43b29e9)
ProductGit (a8ebe631-2ea3-5d47-a461-2c01c7e21d38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/git/git purl2cpe 2026-06-01 10:15:43.006433
pkg:gitlab/gitlab-org/git purl2cpe 2026-06-01 10:15:43.006434

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3906 vulnerable 2026-06-08 04:55:17.870361 Details available
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
Published: 2010-12-17T18:00:00.000Z
Updated: 2024-08-07T03:26:12.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2108 vulnerable 2026-06-08 04:51:26.780247 Details available
git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.
Published: 2009-06-18T18:00:00.000Z
Updated: 2024-08-07T05:36:20.990Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.