{"id":"CVE-2021-40330","aliases":["ALPINE-CVE-2021-40330","CLSA-2023-1677095411","CLSA-2023-1677095961","CLSA-2023-1677096181","CLSA-2023-1677096675","CLSA-2023-1677231280","CLSA-2024-1712672592","DEBIAN-CVE-2021-40330","DLA-3145-1","EUVD-2021-27510","GHSA-8r9w-64qj-m6cj","OESA-2021-1345","SUSE-SU-2021:3300-1","SUSE-SU-2021:3484-1","UBUNTU-CVE-2021-40330","USN-5076-1","openSUSE-SU-2021:1345-1","openSUSE-SU-2021:3300-1"],"status":"published","title":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline...","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02874,"percentile":0.87016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-08-31T00:00:00Z","modified":"2026-10-24T14:25:20Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"git","fixed_in":["2.26.3-r1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"git","fixed_in":["1:2.30.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"git","fixed_in":["1:2.30.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"git","fixed_in":["1:2.30.1-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"git","fixed_in":["2.27.0-5.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"git","fixed_in":["2.27.0-5.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"git","fixed_in":["2.26.2-33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"git","fixed_in":["2.26.2-33.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"git","fixed_in":["2.26.2-27.49.3"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"git","fixed_in":["2.26.2-27.49.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"git","fixed_in":["2.26.2-27.49.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"git","fixed_in":["2.26.2-27.49.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"git","fixed_in":["2.26.2-27.49.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"git","fixed_in":["1:2.7.4-0ubuntu1.10+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"git","fixed_in":["1:2.17.1-1ubuntu0.9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"git","fixed_in":["1:2.25.1-1ubuntu3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"git","fixed_in":["2.26.2-lp152.2.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"git","fixed_in":["2.26.2-33.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.3-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-credential-libsecret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-subtree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-core-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-credential-libsecret","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-subtree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.el8.tuxcare.els1"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-arch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-daemon-run","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-daemon-sysvinit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-man","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+tuxcare.els1"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-10.el6_10.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gnome-keyring","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-instaweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.3.1-25.el7_9.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.30.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.30.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.30.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.20.1-2+deb10u4"}]}],"versions":["1:2.20.1-2","1:2.20.1-2+deb10u1","1:2.20.1-2+deb10u2","1:2.20.1-2+deb10u3"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-5.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-5.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP2","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-33.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-27.49.3"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-27.49.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-27.49.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-27.49.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-27.49.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+esm1"}]}],"versions":["1:2.5.0-1","1:2.6.2-1","1:2.6.3-1","1:2.6.4-1","1:2.7.0~rc3-1","1:2.7.0-1","1:2.7.3-0ubuntu1","1:2.7.4-0ubuntu1","1:2.7.4-0ubuntu1.1","1:2.7.4-0ubuntu1.2","1:2.7.4-0ubuntu1.3","1:2.7.4-0ubuntu1.4","1:2.7.4-0ubuntu1.5","1:2.7.4-0ubuntu1.6","1:2.7.4-0ubuntu1.7","1:2.7.4-0ubuntu1.8","1:2.7.4-0ubuntu1.9","1:2.7.4-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.9"}]}],"versions":["1:2.14.1-1ubuntu4","1:2.15.1-1ubuntu2","1:2.17.0-1ubuntu1","1:2.17.1-1ubuntu0.1","1:2.17.1-1ubuntu0.3","1:2.17.1-1ubuntu0.4","1:2.17.1-1ubuntu0.5","1:2.17.1-1ubuntu0.6","1:2.17.1-1ubuntu0.7","1:2.17.1-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.1-1ubuntu3.2"}]}],"versions":["1:2.20.1-2ubuntu1","1:2.24.0-1ubuntu1","1:2.24.0-1ubuntu2","1:2.25.0-1ubuntu1","1:2.25.1-1ubuntu1","1:2.25.1-1ubuntu2","1:2.25.1-1ubuntu3","1:2.25.1-1ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.7.4-0ubuntu1.10+esm1"}]}],"versions":["1:2.5.0-1","1:2.6.2-1","1:2.6.3-1","1:2.6.4-1","1:2.7.0~rc3-1","1:2.7.0-1","1:2.7.3-0ubuntu1","1:2.7.4-0ubuntu1","1:2.7.4-0ubuntu1.1","1:2.7.4-0ubuntu1.2","1:2.7.4-0ubuntu1.3","1:2.7.4-0ubuntu1.4","1:2.7.4-0ubuntu1.5","1:2.7.4-0ubuntu1.6","1:2.7.4-0ubuntu1.7","1:2.7.4-0ubuntu1.8","1:2.7.4-0ubuntu1.9","1:2.7.4-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.17.1-1ubuntu0.9"}]}],"versions":["1:2.14.1-1ubuntu4","1:2.15.1-1ubuntu2","1:2.17.0-1ubuntu1","1:2.17.1-1ubuntu0.1","1:2.17.1-1ubuntu0.3","1:2.17.1-1ubuntu0.4","1:2.17.1-1ubuntu0.5","1:2.17.1-1ubuntu0.6","1:2.17.1-1ubuntu0.7","1:2.17.1-1ubuntu0.8"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.25.1-1ubuntu3.2"}]}],"versions":["1:2.20.1-2ubuntu1","1:2.24.0-1ubuntu1","1:2.24.0-1ubuntu2","1:2.25.0-1ubuntu1","1:2.25.1-1ubuntu1","1:2.25.1-1ubuntu2","1:2.25.1-1ubuntu3","1:2.25.1-1ubuntu3.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-lp152.2.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.26.2-33.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"git-scm","product":"git"}],"references":[{"url":"https://github.com/git/git/commit/a02ea577174ab8ed18f847cf1693f213e0b9c473","tags":["x_transferred","Exploit","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/git/git/compare/v2.30.0...v2.30.1","tags":["x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00014.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40330","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8r9w-64qj-m6cj"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-40330","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1677095411.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1677095961.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1677096181.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1677096675","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1677231280.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1712672592.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-40330","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1345","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213300-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1189992","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-40330","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213484-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-40330","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5076-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-40330","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HHADPIKH543AF7C3D6N7XU3ZL56DUAOW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VXUBRXLMWBRLT5YI5UGAWTWUKG3VAM46/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T00:00:00Z","modified":"2024-08-04T02:27:31.913Z","updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-27510","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T00:00:00Z","modified":"2024-08-04T02:27:31Z","updated_at":"2026-11-03T03:24:20.862157Z"}],"ghsa":[{"id":"GHSA-8r9w-64qj-m6cj","title":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline...","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2022-05-24T19:12:40Z","modified":"2023-02-02T05:01:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T14:51:08.679679Z"}],"nvd":[{"id":"CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T04:15:10.667Z","modified":"2026-06-17T04:06:44.27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:57.67549Z"}],"osv":[{"id":"ALPINE-CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T04:15:10.667Z","modified":"2026-10-23T17:17:56.209682889Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T04:15:10.667Z","modified":"2026-10-24T14:25:20.480275631Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T04:15:10.667Z","modified":"2026-10-23T18:03:32.794048046Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2021-1345","title":"git security update","description":"Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency.\n\nGit is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and ClearCase with features like cheap local branching, convenient staging areas, and multiple workflows.\r\n\r\nSecurity Fix(es):\r\n\r\ngit_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.(CVE-2021-40330)","status":"published","published":"2021-09-18T11:04:37Z","modified":"2026-08-18T01:15:36.511290346Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-40330","description":"git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.","status":"published","published":"2021-08-31T04:15:00Z","modified":"2026-02-04T03:21:49.970647Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"CLSA-2023-1677095411","title":"git: Fix of 6 CVEs","description":"- CVE-2022-41903: fix out-of-bounds write caused by integer overflow\n- CVE-2021-40330: forbid newlines in host and path\n- CVE-2022-39260: reject too long command line strings\n- CVE-2021-23521: implement size checks for .gitattributes\n- CVE-2023-22490: prevent arbitrary path exfiltration when using non-local transports\n- CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links","status":"published","published":"2023-02-22T19:50:11Z","modified":"2026-10-21T10:47:56.923812001Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1677095961","title":"git: Fix of 6 CVEs","description":"- CVE-2022-41903: fix out-of-bounds write caused by integer overflow\n- CVE-2021-40330: forbid newlines in host and path\n- CVE-2022-39260: reject too long command line strings\n- CVE-2021-23521: implement size checks for .gitattributes\n- CVE-2023-22490: prevent arbitrary path exfiltration when using non-local transports\n- CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links","status":"published","published":"2023-02-22T19:59:21Z","modified":"2026-10-21T10:48:24.038518896Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1677096181","title":"git: Fix of 4 CVEs","description":"- CVE-2022-41903: fix out-of-bounds write caused by integer overflow\n- CVE-2021-40330: forbid newlines in host and path\n- CVE-2022-39260: reject too long command line strings\n- CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links","status":"published","published":"2023-02-22T20:03:01Z","modified":"2026-10-21T10:48:10.954290101Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1677096675","title":"Fix of 5 CVEs","description":"\n   * SECURITY UPDATE: out-of-bounds write caused by integer overflow\n     - debian/patches/CVE-2022-41903.patch: use 'size_t' instead of\n       'int' to track the string lengths and so allow \u003e2GB input sizes.\n     - CVE-2022-41903\n     - t-mark-submodule-clean-test-as-known-failure.patch: mark\n       submodule clean test as known failure and so pass 'make test'.\n   * SECURITY UPDATE: possible cross-protocol requests\n     - debian/patches/CVE-2021-40330.patch: forbid newlines in host\n       and path.\n     - CVE-2021-40330\n   * SECURITY UPDATE: out-of-bounds write and possible RCE caused by\n     integer overflow\n     - debian/patches/CVE-2022-39260.patch: reject too long command\n       line strings in split_cmdline().\n     - CVE-2022-39260\n   * SECURITY UPDATE: out-of-bounds write when reading an unreasonably\n     large .gitattributes file\n     - debian/patches/CVE-2021-23521.patch: implement line and overall\n       size checks for .gitattributes files.\n     - CVE-2021-23521\n   * SECURITY UPDATE: possible write outside of the repository's\n     working directory\n     - debian/patches/CVE-2023-23946.patch: prevent git-apply from\n       writing behind newly created symbolic links.\n     - CVE-2023-23946","status":"published","published":"2023-02-22T20:11:15Z","modified":"2026-06-04T10:03:38.164606622Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1677231280","title":"git: Fix of 4 CVEs","description":"- CVE-2022-41903: fix out-of-bounds write caused by integer overflow\n- CVE-2021-40330: forbid newlines in host and path\n- CVE-2022-39260: reject too long command line strings\n- CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links","status":"published","published":"2023-02-24T09:34:40Z","modified":"2026-10-21T10:47:05.935434727Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2024-1712672592","title":"git: Fix of 2 CVEs","description":"- CVE-2021-40330: forbid newlines in host and path in git_connect()\n- CVE-2022-39260: shell - limit size of interactive commands","status":"published","published":"2024-04-09T14:23:15Z","modified":"2026-06-01T00:33:04.204341773Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-3145-1","title":"git - security update","status":"published","published":"2022-10-11T00:00:00Z","modified":"2026-03-09T01:23:10.2193Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"openSUSE-SU-2021:1345-1","title":"Security update for git","description":"This update for git fixes the following issues:\n\n- CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in git_connect_git repository path (bsc#1189992).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-10-11T16:06:28Z","modified":"2026-02-04T03:42:00.679579Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3300-1","title":"Security update for git","description":"This update for git fixes the following issues:\n\n- CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in git_connect_git repository path (bsc#1189992).\n","status":"published","published":"2021-10-06T14:58:14Z","modified":"2026-02-04T03:34:08.042281Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:3300-1","title":"Security update for git","description":"This update for git fixes the following issues:\n\n- CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in git_connect_git repository path (bsc#1189992).\n","status":"published","published":"2021-10-06T14:58:08Z","modified":"2026-02-04T03:01:27.100282Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3484-1","title":"Security update for git","description":"This update for git fixes the following issues:\n\n- CVE-2021-40330: Fixed unexpected cross-protocol requests via newline character in git_connect_git repository path (bsc#1189992).\n","status":"published","published":"2021-10-20T14:17:52Z","modified":"2025-05-02T04:10:52.135806Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"USN-5076-1","title":"git vulnerability","description":"It was discovered that Git allowed newline characters in\ncertain repository paths. An attacker could potentially use this issue to perform\ncross-protocol requests.\n","status":"published","published":"2021-09-13T14:49:00Z","modified":"2026-06-25T13:30:46.825033586Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}