Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/libgit2@0.25.1-r0?arch=aarch64&distroversion=v3.11&reponame=main
purl pkg:apk/alpine/libgit2@0.25.1-r0?arch=aarch64&distroversion=v3.11&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-bejf-17ah-tybt Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet. CVE-2016-10128
VCID-rvbe-y541-nyh7 The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line. CVE-2016-10129
VCID-xab7-k14p-uqbx The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable. CVE-2016-10130

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-06T04:54:45.114636+00:00 Alpine Linux Importer Fixing VCID-rvbe-y541-nyh7 https://secdb.alpinelinux.org/v3.11/main.json 38.1.0
2026-04-01T19:14:56.719533+00:00 Alpine Linux Importer Fixing VCID-xab7-k14p-uqbx https://secdb.alpinelinux.org/v3.11/main.json 38.0.0
2026-04-01T18:54:06.231445+00:00 Alpine Linux Importer Fixing VCID-bejf-17ah-tybt https://secdb.alpinelinux.org/v3.11/main.json 38.0.0