CyberSecBulletin

Ungit vulnerabilities

We track 1 vulnerability in Ungit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2022.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Ungit vulnerabilities

  • 8.8 High severity

    ungit: Improper Neutralization of Argument Delimiters in a Command

    CVE-2022-25766UngitEPSS 34.5%

    The package ungit before 1.5.20 are vulnerable to Remote Code Execution (RCE) via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values (remote and ref) are passed to the git fetch command. By injecting some git opti