Approved changes feed: RSS · Atom
cpe:2.3:a:juliaweb:github.jl:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Juliaweb (c4614454-faf2-5098-ae2f-92ae80586ec4) |
|---|---|
| Product | Github.Jl (da2ee6ac-4b63-5de5-b59d-912c13b85486) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52569 |
vulnerable | 2026-06-08 07:31:11.860407 |
GitHub.jl lacks validation for user-provided fields
GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions. In the `GitHub.repo()` function, the user can provide any string for the `repo_name` field. These inputs are not validated or safely encoded and are sent directly to the server. This means a user can add path traversal patterns like `../` in the input to access any other endpoints on `api.github.com` that were not intended. Users should upgrade immediately to v5.9.1 or later to receive a patch. All prior versions are vulnerable. No known workarounds are available.
Published: 2025-06-25T16:41:46.303Z
Updated: 2025-06-25T17:55:48.517Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.