obs-scm-bridge (SUSE:Linux Enterprise Module for Development Tools 15 SP7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Development Tools 15 SP7 package obs-scm-bridge, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2025-27614 — CVSS 8.6 (high): Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social…
• CVE-2025-48385: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2025-46835 — CVSS 8.5 (high): Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into…
• CVE-2025-48384 — CVSS 8.0 (high) — actively exploited: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations…
• CVE-2025-27613 — CVSS 3.6 (low): Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without…