Git-annex Project Git-annex — known CVE vulnerabilities

Every CVE whose affected-product data names Git-annex Project Git-annex, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-12976 — CVSS 8.8 (high): git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the…
• CVE-2014-6274 — CVSS 7.5 (high): git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or…
• CVE-2018-10857 — CVSS 5.9 (medium): git-annex is vulnerable to a private data exposure and exfiltration attack. It could expose the content of files located outside the…
• CVE-2018-10859 — CVSS 5.9 (medium): git-annex is vulnerable to an Information Exposure when decrypting files. A malicious server for a special remote could trick git-annex…