Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

dulwich — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in dulwich, with AI-generated Chinese analysis, references, and POCs.

Vendor: jelmer

CVE ID Title CVSS Severity Published
CVE-2026-114098 Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks CWE-22 7.8 High 2026-10-21
CVE-2026-114096 Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths CWE-59 7.8 High 2026-10-21
CVE-2026-114097 Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter CWE-22 7.8 High 2026-10-21
CVE-2026-114095 Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object CWE-835 6.5 Medium 2026-10-21
CVE-2026-114094 Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths CWE-22 8.8 High 2026-10-21
CVE-2026-52726 Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload CWE-22 7.5 High 2026-06-10
CVE-2026-47734 Dulwich has unbounded memory allocation in receive-pack from crafted thin packs CWE-400 5.7 Medium 2026-06-10
CVE-2026-47712 Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` CWE-22 3.3 Low 2026-06-10
CVE-2026-42305 Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows CWE-22 8.8 High 2026-06-10
CVE-2026-42563 Dulwich Vulnerable to Command Injection via Merge Driver Path CWE-78 - - 2026-06-10

All 10 known CVE vulnerabilities affecting dulwich with full Chinese analysis, references, and POCs where available.