gitjacker arbitrary code execution

CRITICO 9.8CVE-2021-29417 · GHSA-4j5x-f394-xx79 · GO-2023-1911 · Published 29/03/2021 · updated 17/06/2026

In breve

CVE-2021-29417 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda github.com/liamg/gitjacker, gitjacker (gitjacker project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.8%, superiore al 90.0% delle vulnerabilità.
Correzione: aggiornare a 0.1.0 o successiva.

Package	Affected versions	Patched versions
github.com/liamg/gitjacker Go	`< 0.1.0`	`0.1.0`
gitjacker gitjacker_project	`< 0.1.0`	`0.1.0`

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal.

NVD description

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.