Approved changes feed: RSS · Atom

cpe:2.3:a:yadm_project:yadm:1.10.0:*:*:*:*:*:*:*

part: a version: 1.10.0 update: *

VendorYadm Project (1cf2d7f1-dec1-5a27-988f-8637205f5953)
ProductYadm (8d353fa3-4b93-5783-bb30-189c1f8166b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/yadm purl2cpe 2026-06-01 10:14:57.876670
pkg:deb/ubuntu/yadm purl2cpe 2026-06-01 10:14:57.876671
pkg:github/thelocehiliosan/yadm purl2cpe 2026-06-01 10:14:57.876673

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11353 vulnerable 2026-06-08 05:08:37.348548 Details available
yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files and directories), which potentially allows access to SSH and PGP keys.
Published: 2017-07-17T01:00:00.000Z
Updated: 2024-08-05T18:05:30.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.