jelmer — Vulnerabilities & Security Advisories 10

Browse all 10 CVE security advisories affecting jelmer. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by jelmer: dulwich

CVEs 10

CVE ID	Title	CVSS	Severity	Published
CVE-2026-114098	Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinks — dulwich CWE-22	7.8	High	2026-10-21
CVE-2026-114096	Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths — dulwich CWE-59	7.8	High	2026-10-21
CVE-2026-114097	Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filter — dulwich CWE-22	7.8	High	2026-10-21
CVE-2026-114095	Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_object — dulwich CWE-835	6.5	Medium	2026-10-21
CVE-2026-114094	Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths — dulwich CWE-22	8.8	High	2026-10-21
CVE-2026-52726	Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload — dulwich CWE-22	7.5	High	2026-06-10
CVE-2026-47734	Dulwich has unbounded memory allocation in receive-pack from crafted thin packs — dulwich CWE-400	5.7	Medium	2026-06-10
CVE-2026-47712	Dulwich doesn't sanitize commit subjects in `porcelain.format_patch` — dulwich CWE-22	3.3	Low	2026-06-10
CVE-2026-42305	Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows — dulwich CWE-22	8.8	High	2026-06-10
CVE-2026-42563	Dulwich Vulnerable to Command Injection via Merge Driver Path — dulwich CWE-78	-	-	2026-06-10

This page lists every published CVE security advisory associated with jelmer. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.