dulwich vulnerabilities (PyPI)
13 vulnerabilities.
-
dulwichPyPI Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths 8.7 High -
dulwichPyPI Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object 7.1 High -
dulwichPyPI Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths 7.3 High -
dulwichPyPI Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter 7.3 High -
dulwichPyPI Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks 7.3 High -
dulwichPyPI Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload 7.5 High -
dulwichPyPI Dulwich has unbounded memory allocation in receive-pack from crafted thin packs 5.7 Medium -
dulwichPyPI Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` 3.3 Low -
dulwichPyPI Dulwich Vulnerable to Command Injection via Merge Driver Path 7.7 High -
dulwichPyPI Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows 8.8 High -
dulwichPyPI Dulwich RCE Vulnerability 9.8 Critical -
dulwichPyPI Dulwich Buffer Overflow when handling pack files 7.5 High -
dulwichPyPI Dulwich Arbitrary code execution via commit with directory path starting with .git 7.5 High