| Package | Affected versions | Patched versions |
|---|---|---|
| git | ≥ 2.14.0, < 2.14.6≥ 2.15.0, < 2.15.4≥ 2.16.0, < 2.16.6≥ 2.17.0, < 2.17.3≥ 2.18.0, < 2.18.2≥ 2.19.0, < 2.19.3≥ 2.20.0, < 2.20.2≥ 2.21.0, < 2.21.1≥ 2.22.0, < 2.22.2≥ 2.23.0, < 2.23.1≥ 2.24.0, < 2.24.1 | 2.14.62.15.42.16.62.17.32.18.22.19.32.20.22.21.12.22.22.23.12.24.1 |
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free