jj vulnerabilities

1 known vulnerability in jj from Martinvonz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  jj: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-51990Nov 7, 2024Martinvonz

  jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upg