Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft_corporation:git:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMicrosoft Corporation (fc66ce9b-351f-5bf8-b2d9-ed34143ae0dc)
ProductGit (f694fbf0-c55a-5dae-a854-d2c2738c35ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1387 vulnerable 2026-06-08 05:13:25.799941 Details available
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.
Published: 2019-12-18T20:11:53.000Z
Updated: 2025-11-04T16:09:13.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1353 vulnerable 2026-06-08 05:13:25.714952 Details available
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux (also known as "WSL") while accessing a working directory on a regular Windows drive, none of the NTFS protections were active.
Published: 2020-01-24T21:14:21.000Z
Updated: 2024-08-04T18:13:30.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1348 vulnerable 2026-06-08 05:13:25.709305 Details available
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
Published: 2020-01-24T21:14:21.000Z
Updated: 2024-08-04T18:13:30.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.